Function at 0x426c1f
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov eax, 0x498c62
call fcn.00486614
mov eax, 0x1734
call fcn.00487110
push ebx
push esi
push edi
xor ebx, ebx
mov esi, ecx
push str.System_Info
mov dword [ebp - 0x24], ebx
call fcn.00427dba
mov dword [esi + 0x3c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.00413614
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], ebx
push 0x4c0c7c
call fcn.00426638
lea eax, [ebp - 0x18]
push eax
call fcn.0047df67
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov byte [ebp - 4], 1
push str.OS_Enum
call fcn.00426638
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004015f7
call fcn.0047d908
cmp al, bl
mov eax, 0x4c0c64
jne 0x426cad
mov eax, 0x4c0c5c
push eax
push str.Bitness
mov ecx, esi
call fcn.00426638
mov ecx, 0x80
xor eax, eax
lea edi, [ebp - 0x2d2]
mov word [ebp - 0x2d4], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x100
push eax
lea eax, [ebp - 0x2d4]
push eax
call dword [0x4a2018]
lea eax, [ebp - 0x2d4]
mov ecx, esi
push eax
push str.Windows_Account
call fcn.00426638
lea eax, [ebp - 0x10]
push eax
call fcn.0041d191
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 2
push eax
call fcn.00473fe0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
xor eax, eax
mov byte [ebp - 4], 3
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x18]
push str.Desktop
call fcn.00427d7a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
lea eax, [ebp - 0x10]
push eax
call fcn.00412d3f
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
call fcn.00473fe0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
xor eax, eax
mov byte [ebp - 4], 5
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x18]
push str.Current_Mutex
call fcn.00427d7a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
lea eax, [ebp - 0x6c]
push eax
call fcn.00472635
pop ecx
cmp dword [ebp - 0x64], ebx
mov dword [ebp - 4], 6
setne byte [ebp - 0x19]
cmp byte [ebp - 0x19], bl
je 0x426dd2
mov edi, dword [ebp - 0x68]
cmp edi, ebx
jne 0x426deb
mov edi, 0x4a2d2c
jmp 0x426deb
lea eax, [ebp - 0x18]
push str.Not_Found
push eax
call fcn.00473fe0
mov edi, dword [eax]
pop ecx
pop ecx
mov dword [ebp - 0x24], 1
test byte [ebp - 0x24], 1
je 0x426dfd
and dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x18]
call fcn.004015f7
xor eax, eax
cmp byte [ebp - 0x19], bl
mov ecx, esi
setne al
push eax
push edi
push str.Domain_Name
call fcn.00427d7a
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x6c]
call fcn.0042a669
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.0046ca5e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
push eax
call fcn.0046ca45
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 8
push eax
call fcn.0046ca2c
add esp, 0x10
mov edi, 0x4bb434
mov byte [ebp - 4], 9
push edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00403cf0
push dword [ebp - 0x20]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00403c43
push edi
push eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
push eax
call fcn.00403cf0
push dword [ebp - 0x10]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403c43
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x13
call fcn.004015f7
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.004015f7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.004015f7
push dword [ebp - 0x18]
mov ecx, esi
push str.Country
call fcn.00426638
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004015f7
push 0xf
xor eax, eax
pop ecx
lea edi, [ebp - 0xcc]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0x40
push eax
call dword [0x4a2288]
push dword [ebp - 0xc0]
lea eax, [ebp - 0x14]
push eax
call fcn.004105a9
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x14
push str.Memory
call fcn.00426638
or edi, 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.0046166b
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x15
push str.Memory_Physical_Available
call fcn.00426638
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004617a2
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x16
push str.Memory_Installed
call fcn.00426638
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004618ea
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x17
push str.Memory_Usage
call fcn.00426638
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.004015f7
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x8c]
mov dword [ebp - 0x90], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x90]
push eax
call dword [0x4a228c]
push dword [ebp - 0x7c]
mov ecx, esi
push str.Number_of_Processors
call fcn.00425ecc
push dword [ebp - 0x90]
lea eax, [ebp - 0x14]
push eax
call fcn.004255ea
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x18
push str.Processor_Architecture
call fcn.00426638
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004015f7
lea eax, [ebp - 0x18]
push eax
call fcn.004257e0
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov dword [ebp - 4], 0x19
push str.Web_Browser
call fcn.00426638
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.00472828
pop ecx
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
cmp eax, ebx
mov dword [ebp - 4], 0x1a
je 0x42708e
cmp dword [ebp - 0x14], ebx
mov edi, str.enabled
jne 0x42708a
mov edi, str.disabled
cmp edi, ebx
jmp 0x427097
mov edi, str.Not_detected
mov eax, edi
test eax, eax
jne 0x42709d
xor eax, eax
jmp 0x4270a4
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
push dword [ebp - 0x10]
mov ecx, esi
push 0xc1
call fcn.004265eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004015f7
mov eax, dword [0x4bb1a0]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0041135c
pop ecx
pop ecx
lea eax, [ebp - 0x44]
push str._build
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403cf0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403c43
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x1e
push 0x4bb67c
call fcn.00426638
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
mov dword [esi + 0x40], edi
call fcn.00475ab9
mov edi, eax
lea eax, [ebp - 0x14]
neg edi
sbb edi, edi
push eax
neg edi
call fcn.0041ad58
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.USES_NAME_EVENT_EXIT_ALL
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.00427d7a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea eax, [ebp - 0x14]
push eax
call fcn.004134ac
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x20
mov ecx, esi
push str.Created
call fcn.00426638
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
mov ecx, esi
call fcn.00425cdc
mov eax, dword [0x4bb1a0]
mov dword [ebp - 0x10], eax
mov edi, 0xa29
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0x21
call fcn.00401877
test eax, eax
je 0x4271d5
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1452], bx
mov eax, dword [ebp - 0x10]
push 0xa28
push eax
call fcn.0041731a
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004018df
push dword [ebp - 0x10]
mov ecx, esi
call fcn.004256e9
lea eax, [ebp - 0x28]
push eax
call fcn.00415fd7
mov dword [esp], str.FlgCrt.dll
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x22
push eax
call fcn.00403cf0
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x23
call fcn.004016bd
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x22
call fcn.004015f7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
call fcn.004256e9
lea eax, [ebp - 0x14]
push eax
call fcn.0041b1aa
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call fcn.004016bd
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
call fcn.004256e9
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea eax, [ebp - 0x18]
push eax
call fcn.0045e008
pop ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x25
cmp dword [eax - 8], ebx
jne 0x4272a9
push 0x4cb3a8
lea ecx, [ebp - 0x28]
call fcn.00401623
or dword [ebp - 0x24], 2
mov byte [ebp - 4], 0x26
jmp 0x4272c0
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00415a2e
or dword [ebp - 0x24], 4
pop ecx
pop ecx
mov dword [ebp - 4], 0x27
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x4272d6
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a23dc]
jmp 0x4272e9
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00403c1c
test byte [ebp - 0x24], 4
mov dword [ebp - 4], 0x2a
je 0x427302
and dword [ebp - 0x24], 0xfffffffb
lea ecx, [ebp - 0x14]
call fcn.004015f7
test byte [ebp - 0x24], 2
mov dword [ebp - 4], 0x29
je 0x427317
lea ecx, [ebp - 0x28]
call fcn.004015f7
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp dword [ecx - 8], ebx
sete al
cmp eax, ebx
je 0x427347
mov edi, str.English__Embedded__EN
mov eax, edi
test eax, eax
je 0x427338
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
jmp 0x4273eb
lea eax, [ebp - 0x20]
push eax
call fcn.0045db1a
pop ecx
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x2b
cmp dword [eax - 8], ebx
je 0x42738d
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push 0x4bb434
push eax
call fcn.00403d54
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2c
push dword [eax - 8]
call fcn.00403db8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.004015f7
lea eax, [ebp - 0x24]
push eax
call fcn.0045df99
pop ecx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x2d
cmp dword [eax - 8], ebx
je 0x4273d3
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push 0x4bb434
push eax
call fcn.00403d54
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2e
push dword [eax - 8]
call fcn.00403db8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2d
call fcn.004015f7
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2b
call fcn.004015f7
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x29
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
push str.Language_File
call fcn.00426638
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x25
call fcn.004015f7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
push 0x4c0a6c
lea ecx, [ebp - 0x4c]
call fcn.00401623
push dword [ebp - 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x2f
push str.Unicode
call fcn.00426638
call dword [0x4a2290]
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ebp - 0x10]
push 0x4bb2d8
push eax
mov byte [ebp - 4], 0x30
call fcn.00403f8d
mov ecx, 0x87
xor eax, eax
lea edi, [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ebx
add esp, 0xc
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push dword [ebp - 0x14]
call dword [0x4a2294]
cmp eax, ebx
je 0x42750a
lea eax, [ebp - 0x2d8]
test eax, eax
je 0x42750a
lea eax, [ebp - 0x2d8]
lea ecx, [ebp - 0x20]
push eax
call fcn.00401623
push ebx
lea ecx, [ebp - 0x20]
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x31
call fcn.00403f5f
test eax, eax
jl 0x4274d3
mov edi, 0x4cb3a8
mov eax, edi
test eax, eax
je 0x4274c7
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
jmp 0x4274ef
mov edi, 0x4bb294
mov eax, edi
test eax, eax
je 0x4274e5
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db8
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x10]
push eax
push dword [eax - 8]
call fcn.00403db8
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x30
call fcn.004015f7
push dword [ebp - 0x10]
mov ecx, esi
push str.Active_Code_Page
call fcn.00426638
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2f
call fcn.004015f7
lea eax, [ebp - 0x38]
push eax
call fcn.00415dbe
pop ecx
push dword [ebp - 0x38]
mov ecx, esi
mov byte [ebp - 4], 0x32
push 0x4c0a2c
call fcn.00426638
push 1
lea eax, [ebp - 0x10]
push dword [ebp - 0x38]
push eax
call fcn.00415afc
add esp, 0xc
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x33
push str.Folder
call fcn.00426638
push dword [ebp - 0x10]
call fcn.00472624
movzx edi, al
pop ecx
push edi
push str.Read_privilegies
mov ecx, esi
call fcn.00425beb
xor edx, edx
cmp edi, ebx
setne dl
inc edx
lea ecx, [esi + 0x58]
push edx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
call fcn.00429dcf
push dword [ebp - 0x10]
call fcn.00472613
movzx edi, al
pop ecx
push edi
push str.Write_privilegies
mov ecx, esi
call fcn.00425beb
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x58]
call fcn.00429dcf
push dword [ebp - 0x10]
call fcn.004726f4
movzx edi, al
pop ecx
push edi
push str.Execute_privilegies
mov ecx, esi
call fcn.00425beb
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x58]
call fcn.00429dcf
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.004015f7
lea eax, [ebp - 0x48]
push eax
call fcn.0040b8de
mov byte [ebp - 4], 0x34
call fcn.0040b8f4
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004167bf
push dword [ebp - 0x50]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x35
push eax
call fcn.00473fe0
add esp, 0x14
lea eax, [ebp - 0x48]
push 0x4bb294
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x36
call fcn.00403cf0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x37
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00403c43
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x39
call fcn.004015f7
push dword [ebp - 0x34]
mov ecx, esi
push str.License
call fcn.00426638
lea eax, [ebp - 0x28]
push eax
call fcn.00413a37
pop ecx
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3a
call fcn.004016bd
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x39
call fcn.004015f7
push str.RC_Start
lea ecx, [ebp - 0x28]
call fcn.00401623
push dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3b
push eax
call fcn.00426638
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x39
call fcn.004015f7
lea eax, [ebp - 0x20]
push eax
call fcn.0041356d
push dword [ebp - 0x20]
mov byte [ebp - 4], 0x3c
call fcn.0041681d
pop ecx
mov byte [ebp - 0x19], al
pop ecx
mov ecx, dword [ebp - 0x20]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0xc]
jl 0x4276f8
push eax
mov dword [ebp - 0x10], ecx
call dword [0x4a23dc]
jmp 0x427709
mov eax, dword [0x4bb1a0]
push ecx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
call fcn.00403c1c
cmp byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x3d
jne 0x42772e
mov edi, str.__not_found
mov eax, edi
test eax, eax
je 0x427724
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db8
push dword [ebp - 0x10]
mov ecx, esi
push str.License_File
call fcn.00426638
xor ecx, ecx
cmp byte [ebp - 0x19], bl
lea edi, [esi + 0x58]
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
mov ecx, edi
call fcn.00429dcf
lea eax, [ebp - 0x28]
push eax
call fcn.0040f93b
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3e
push str.Current_P
call fcn.00426638
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x3d
call fcn.004015f7
push 2
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
mov ecx, edi
push dword [ebp - 0x2c]
call fcn.00429dcf
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x3c
call fcn.004015f7
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x39
call fcn.004015f7
call fcn.0041295b
mov ecx, dword [0x4bb1a0]
mov dword [ebp - 0x10], ecx
sub eax, ebx
mov byte [ebp - 4], 0x3f
je 0x4277df
dec eax
je 0x4277d2
dec eax
jne 0x4277f7
mov edi, str.disabled
jmp 0x4277d7
mov edi, str.enabled__HKLM_
mov eax, edi
test eax, eax
jne 0x4277e6
jmp 0x4277ed
mov edi, str.enabled__HKCU_
jmp 0x4277d7
push edi
call dword [0x4a23e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401740
push dword [ebp - 0x10]
mov ecx, esi
push 0x4c08ec
call fcn.00426638
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x39
call fcn.004015f7
call fcn.0046d2e5
mov dword [ebp - 0x10], eax
call fcn.0046e2a4
test al, al
mov eax, str.enabled
jne 0x42782d
mov eax, str.disabled
push eax
push str.Is_NO_Tray
mov ecx, esi
call fcn.00426638
mov ecx, dword [ebp - 0x10]
call fcn.0046dec4
mov edi, str.Enabled
test eax, eax
mov eax, edi
jne 0x427852
mov eax, str.Disabled
push eax
push str.Auto_Switch_Keyboard_Layout
mov ecx, esi
call fcn.00426638
mov ecx, dword [ebp - 0x10]
call fcn.0046e26f
test eax, eax
mov eax, edi
jne 0x427872
mov eax, str.Disabled
push eax
lea ecx, [ebp - 0x18]
call fcn.00401623
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x40
call fcn.0046e26f
test eax, eax
je 0x4278f3
lea eax, [ebp - 0x30]
push eax
call fcn.00403913
mov edi, eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
mov dword [esp], 0x4bb434
call fcn.00401623
push edi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
call fcn.00403c43
mov eax, dword [eax]
lea ecx, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x43
push dword [eax - 8]
call fcn.00403db8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x42
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x40
call fcn.004015f7
mov edi, str.Enabled
push dword [ebp - 0x18]
mov ecx, esi
push 0x4c0854
call fcn.00426638
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x78]
and eax, 2
cmp al, 2
je 0x427914
mov edi, str.Disabled
push edi
push str.Save_selection
mov ecx, esi
call fcn.00426638
lea eax, [ebp - 0x3c]
push eax
call fcn.0045aac2
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0045a5dd
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [ebp - 4], 0x44
cmp eax, ebx
jne 0x42794d
mov eax, 0x4a2d2c
push eax
lea ecx, [ebp - 0x24]
call fcn.00401623
push 1
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x46
call fcn.0042a669
mov ecx, 0x513
xor eax, eax
lea edi, [ebp - 0x173e]
mov word [ebp - 0x1740], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x1740]
push 0xa28
push eax
push ebx
push dword [ebp - 0x3c]
push ebx
push 0x1200
call dword [0x4a2330]
lea eax, [ebp - 0x1740]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00473fe0
mov edi, eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
push eax
call fcn.00473cae
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x48
push eax
call fcn.00403c43
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x49
call fcn.00403e34
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x48
call fcn.004015f7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
call fcn.004015f7
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x46
call fcn.004015f7
push dword [ebp - 0x24]
mov ecx, esi
push str.Switch_keyboard_method
call fcn.00426638
cmp dword [ebp - 0x20], ebx
je 0x427a19
cmp dword [ebp - 0x20], 3
je 0x427a19
push 2
jmp 0x427a1b
push 1
push eax
lea ecx, [esi + 0x58]
call fcn.00429771
lea eax, [ebp - 0x28]
push eax
call fcn.0041186c
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x4a
push str.Translation_Method
call fcn.00426638
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x46
call fcn.004015f7
mov ecx, esi
call fcn.00425b7c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x40
call fcn.004015f7
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x39
call fcn.004015f7
mov ecx, dword [ebp - 0x10]
call fcn.0046ea87
test eax, eax
mov eax, str.Enabled
jne 0x427a81
mov eax, str.Disabled
push eax
push str.Auto_Check_For_Updates
mov ecx, esi
call fcn.00426638
mov ecx, dword [ebp - 0x10]
call fcn.0046ea8b
push eax
push str.Check_For_Updates_Every_Days
mov ecx, esi
call fcn.00425ecc
lea eax, [ebp - 0x58]
push eax
call fcn.00411434
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x4b
push str.Last_Check
call fcn.00426638
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x39
call fcn.004015f7
mov ecx, esi
call fcn.004251f5
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x36
call fcn.004015f7
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x35
call fcn.004015f7
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x34
call fcn.004015f7
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x32
call fcn.004015f7
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x2f
call fcn.004015f7
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1c
call fcn.004015f7
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
call fcn.004015f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004015f7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret