Function at 0x426ffb
Capabilities:
Contain obfuscated stackstrings
Get geographical location

Disassembly:
mov eax, 0x49a5d2
call fcn.00487e80
mov eax, 0x1740
call fcn.004889a0
push ebx
push esi
push edi
xor ebx, ebx
mov esi, ecx
push str.System_Info
mov dword [ebp - 0x24], ebx
call fcn.00428294
mov dword [esi + 0x3c], eax
lea eax, [ebp - 0x20]
push eax
call fcn.00413797
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], ebx
push 0x4c1d14
call fcn.00426a14
lea eax, [ebp - 0x18]
push eax
call fcn.0047f924
pop ecx
push dword [ebp - 0x18]
mov ecx, esi
mov byte [ebp - 4], 1
push str.OS_Enum
call fcn.00426a14
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.00401600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401600
call fcn.0047f2bd
cmp al, bl
mov eax, 0x4c1cfc
jne 0x427089
mov eax, 0x4c1cf4
push eax
push str.Bitness
mov ecx, esi
call fcn.00426a14
mov ecx, 0x80
xor eax, eax
lea edi, [ebp - 0x2de]
mov word [ebp - 0x2e0], bx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0x100
push eax
lea eax, [ebp - 0x2e0]
push eax
call dword [0x4a3018]
lea eax, [ebp - 0x2e0]
mov ecx, esi
push eax
push str.Windows_Account
call fcn.00426a14
lea eax, [ebp - 0x18]
push eax
call fcn.0041d304
push dword [ebp - 0x18]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 2
push eax
call fcn.0047597f
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 3
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x20]
push str.Desktop
call fcn.00428254
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00401600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401600
lea eax, [ebp - 0x18]
push eax
call fcn.00412e6b
push dword [ebp - 0x18]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 4
push eax
call fcn.0047597f
add esp, 0xc
mov ecx, dword [ebp - 0x18]
xor eax, eax
mov byte [ebp - 4], 5
cmp dword [ecx - 8], ebx
mov ecx, esi
setne al
push eax
push dword [ebp - 0x20]
push str.Current_Mutex
call fcn.00428254
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00401600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401600
lea eax, [ebp - 0x78]
push eax
call fcn.00473fd4
pop ecx
cmp dword [ebp - 0x70], ebx
mov dword [ebp - 4], 6
setne byte [ebp - 0x19]
cmp byte [ebp - 0x19], bl
je 0x4271ae
mov edi, dword [ebp - 0x74]
cmp edi, ebx
jne 0x4271c7
mov edi, 0x4a3d2c
jmp 0x4271c7
lea eax, [ebp - 0x34]
push str.Not_Found
push eax
call fcn.0047597f
mov edi, dword [eax]
pop ecx
pop ecx
mov dword [ebp - 0x24], 1
test byte [ebp - 0x24], 1
je 0x4271d9
and dword [ebp - 0x24], 0xfffffffe
lea ecx, [ebp - 0x34]
call fcn.00401600
xor eax, eax
cmp byte [ebp - 0x19], bl
mov ecx, esi
setne al
push eax
push edi
push str.Domain_Name
call fcn.00428254
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x78]
call fcn.0042abf0
lea eax, [ebp - 0x14]
push 1
push eax
call fcn.0046e21e
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
push eax
call fcn.0046e205
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 8
push eax
call fcn.0046e1ec
add esp, 0x10
mov edi, 0x4bc434
mov byte [ebp - 4], 9
push edi
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00403ced
push dword [ebp - 0x44]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00403c40
push edi
push eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0xb
push eax
call fcn.00403ced
push dword [ebp - 0x18]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00403c40
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x13
call fcn.00401600
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.00401600
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
call fcn.00401600
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00401600
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.00401600
push dword [ebp - 0x20]
mov ecx, esi
push str.Country
call fcn.00426a14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401600
push 0xf
xor eax, eax
pop ecx
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x40
push eax
call dword [0x4a3288]
push dword [ebp - 0xcc]
lea eax, [ebp - 0x14]
push eax
call fcn.004106d5
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x14
push str.Memory
call fcn.00426a14
or edi, 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401600
lea eax, [ebp - 0x14]
push eax
call fcn.00461dad
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x15
push str.Memory_Physical_Available
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401600
lea eax, [ebp - 0x14]
push eax
call fcn.00461ee4
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x16
push str.Memory_Installed
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401600
lea eax, [ebp - 0x14]
push eax
call fcn.0046202c
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x17
push str.Memory_Usage
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00401600
push 8
xor eax, eax
pop ecx
lea edi, [ebp - 0x98]
mov dword [ebp - 0x9c], ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x9c]
push eax
call dword [0x4a328c]
push dword [ebp - 0x88]
mov ecx, esi
push str.Number_of_Processors
call fcn.004262a8
push dword [ebp - 0x9c]
lea eax, [ebp - 0x14]
push eax
call fcn.004259c6
pop ecx
pop ecx
push dword [eax]
mov ecx, esi
mov dword [ebp - 4], 0x18
push str.Processor_Architecture
call fcn.00426a14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401600
lea eax, [ebp - 0x20]
push eax
call fcn.00425bbc
pop ecx
push dword [ebp - 0x20]
mov ecx, esi
mov dword [ebp - 4], 0x19
push str.Web_Browser
call fcn.00426a14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00401600
lea eax, [ebp - 0x14]
push eax
call fcn.004741c7
pop ecx
mov ecx, dword [0x4bc1a0]
mov dword [ebp - 0x18], ecx
cmp eax, ebx
mov dword [ebp - 4], 0x1a
je 0x42746d
cmp dword [ebp - 0x14], ebx
mov edi, str.enabled
jne 0x427469
mov edi, str.disabled
cmp edi, ebx
jmp 0x427476
mov edi, str.Not_detected
mov eax, edi
test eax, eax
jne 0x42747c
xor eax, eax
jmp 0x427483
push edi
call dword [0x4a33e0]
push edi
push eax
lea ecx, [ebp - 0x18]
call fcn.00401749
push dword [ebp - 0x18]
mov ecx, esi
push 0xc1
call fcn.004269c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401600
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00411488
pop ecx
pop ecx
lea eax, [ebp - 0x58]
push str._build
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00403ced
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1d
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403c40
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x1e
push 0x4bc67c
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x1d
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00401600
mov dword [esi + 0x40], edi
call fcn.0041aee6
mov edi, eax
lea eax, [ebp - 0x14]
neg edi
sbb edi, edi
push eax
neg edi
call fcn.0041aecd
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.USES_NAME_EVENT_EXIT_ALL
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.00428254
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.00401600
lea eax, [ebp - 0x14]
push eax
call fcn.0041362f
pop ecx
push dword [eax]
mov byte [ebp - 4], 0x20
mov ecx, esi
push str.Created
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
call fcn.00401600
mov ecx, esi
call fcn.004260b8
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x10], eax
mov edi, 0xa29
lea ecx, [ebp - 0x10]
push edi
mov byte [ebp - 4], 0x21
call fcn.00401880
test eax, eax
je 0x4275b4
mov eax, dword [ebp - 0x10]
mov dword [eax - 8], edi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1452], bx
mov eax, dword [ebp - 0x10]
push 0xa28
push eax
call fcn.0041749d
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.004018e8
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425ac5
lea eax, [ebp - 0x28]
push eax
call fcn.0041615a
mov dword [esp], str.FlgCrt.dll
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x22
push eax
call fcn.00403ced
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x23
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x22
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425ac5
lea eax, [ebp - 0x14]
push eax
call fcn.0041b323
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00425ac5
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call fcn.00401600
lea eax, [ebp - 0x20]
push eax
call fcn.0045e6b9
pop ecx
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0x25
cmp dword [eax - 8], ebx
jne 0x427688
push 0x4cc6c8
lea ecx, [ebp - 0x28]
call fcn.0040162c
or dword [ebp - 0x24], 2
mov byte [ebp - 4], 0x26
jmp 0x42769f
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00415bb1
or dword [ebp - 0x24], 4
pop ecx
pop ecx
mov dword [ebp - 4], 0x27
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jl 0x4276b5
mov dword [ebp - 0x10], ecx
add ecx, 0xfffffff4
push ecx
call dword [0x4a33dc]
jmp 0x4276c8
mov ecx, dword [0x4bc1a0]
mov dword [ebp - 0x10], ecx
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00403c19
test byte [ebp - 0x24], 4
mov dword [ebp - 4], 0x2a
je 0x4276e1
and dword [ebp - 0x24], 0xfffffffb
lea ecx, [ebp - 0x14]
call fcn.00401600
test byte [ebp - 0x24], 2
mov dword [ebp - 4], 0x29
je 0x4276f6
lea ecx, [ebp - 0x28]
call fcn.00401600
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp dword [ecx - 8], ebx
sete al
cmp eax, ebx
je 0x427726
mov edi, str.English__Embedded__EN
mov eax, edi
test eax, eax
je 0x427717
push edi
call dword [0x4a33e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401749
jmp 0x4277ca
lea eax, [ebp - 0x24]
push eax
call fcn.0045e1cb
pop ecx
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x2b
cmp dword [eax - 8], ebx
je 0x42776c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x30]
push 0x4bc434
push eax
call fcn.00403d51
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2c
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2b
call fcn.00401600
lea eax, [ebp - 0x18]
push eax
call fcn.0045e64a
pop ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x2d
cmp dword [eax - 8], ebx
je 0x4277b2
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x30]
push 0x4bc434
push eax
call fcn.00403d51
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2e
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2d
call fcn.00401600
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x2b
call fcn.00401600
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x29
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
push str.Language_File
call fcn.00426a14
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x25
call fcn.00401600
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.00401600
push 0x4c1b04
lea ecx, [ebp - 0x4c]
call fcn.0040162c
push dword [ebp - 0x4c]
mov ecx, esi
mov byte [ebp - 4], 0x2f
push str.Unicode
call fcn.00426a14
call dword [0x4a3290]
mov ecx, dword [0x4bc1a0]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push eax
lea eax, [ebp - 0x10]
push 0x4bc2d8
push eax
mov byte [ebp - 4], 0x30
call fcn.00403f8a
mov ecx, 0x87
xor eax, eax
lea edi, [ebp - 0x2f8]
mov dword [ebp - 0x2fc], ebx
add esp, 0xc
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2fc]
push eax
push ebx
push dword [ebp - 0x14]
call dword [0x4a3294]
cmp eax, ebx
je 0x4278e9
lea eax, [ebp - 0x2e4]
test eax, eax
je 0x4278e9
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x18]
push eax
call fcn.0040162c
push ebx
lea ecx, [ebp - 0x18]
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x31
call fcn.00403f5c
test eax, eax
jl 0x4278b2
mov edi, 0x4cc6c8
mov eax, edi
test eax, eax
je 0x4278a6
push edi
call dword [0x4a33e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401749
jmp 0x4278ce
mov edi, 0x4bc294
mov eax, edi
test eax, eax
je 0x4278c4
push edi
call dword [0x4a33e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
push eax
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x30
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
push str.Active_Code_Page
call fcn.00426a14
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2f
call fcn.00401600
lea eax, [ebp - 0x48]
push eax
call fcn.00415f41
pop ecx
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 0x32
push 0x4c1ac4
call fcn.00426a14
push 1
lea eax, [ebp - 0x10]
push dword [ebp - 0x48]
push eax
call fcn.00415c7f
add esp, 0xc
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x33
push str.Folder
call fcn.00426a14
push dword [ebp - 0x10]
call fcn.00473fc3
movzx edi, al
pop ecx
push edi
push str.Read_privilegies
mov ecx, esi
call fcn.00425fc7
xor edx, edx
cmp edi, ebx
setne dl
inc edx
lea ecx, [esi + 0x5c]
push edx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
call fcn.0042a34b
push dword [ebp - 0x10]
call fcn.00473fb2
movzx edi, al
pop ecx
push edi
push str.Write_privilegies
mov ecx, esi
call fcn.00425fc7
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x5c]
call fcn.0042a34b
push dword [ebp - 0x10]
call fcn.00474093
movzx edi, al
pop ecx
push edi
push str.Execute_privilegies
mov ecx, esi
call fcn.00425fc7
xor ecx, ecx
cmp edi, ebx
setne cl
inc ecx
push ecx
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push eax
lea ecx, [esi + 0x5c]
call fcn.0042a34b
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.00401600
call fcn.00412a87
mov ecx, dword [0x4bc1a0]
mov dword [ebp - 0x10], ecx
sub eax, ebx
mov byte [ebp - 4], 0x34
je 0x427a17
dec eax
je 0x427a0a
dec eax
jne 0x427a2f
mov edi, str.disabled
jmp 0x427a0f
mov edi, str.enabled__HKLM_
mov eax, edi
test eax, eax
jne 0x427a1e
jmp 0x427a25
mov edi, str.enabled__HKCU_
jmp 0x427a0f
push edi
call dword [0x4a33e0]
push edi
push eax
lea ecx, [ebp - 0x10]
call fcn.00401749
push dword [ebp - 0x10]
mov ecx, esi
push 0x4c19dc
call fcn.00426a14
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call fcn.00401600
call fcn.0046eaa5
mov dword [ebp - 0x10], eax
call fcn.0046fa5e
test al, al
mov eax, str.enabled
jne 0x427a65
mov eax, str.disabled
push eax
push str.Is_NO_Tray
mov ecx, esi
call fcn.00426a14
mov ecx, dword [ebp - 0x10]
call fcn.0046f67b
test eax, eax
mov edi, str.Disabled
mov eax, str.Enabled
jne 0x427a8a
mov eax, edi
push eax
push str.Auto_Switch_Keyboard_Layout
mov ecx, esi
call fcn.00426a14
mov ecx, dword [ebp - 0x10]
call fcn.0046fa26
test eax, eax
mov eax, str.Enabled
jne 0x427aaa
mov eax, edi
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040162c
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x35
call fcn.0046fa26
test eax, eax
je 0x427b2b
lea eax, [ebp - 0x30]
push eax
call fcn.00403923
mov edi, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
mov dword [esp], 0x4bc434
call fcn.0040162c
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x37
push eax
call fcn.00403c40
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x38
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x37
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
call fcn.00401600
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x35
call fcn.00401600
mov edi, str.Disabled
push dword [ebp - 0x2c]
mov ecx, esi
push 0x4c1944
call fcn.00426a14
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x80]
and eax, 2
cmp al, 2
jne 0x427b4f
mov edi, str.Enabled
push edi
push str.Save_selection
mov ecx, esi
call fcn.00426a14
lea eax, [ebp - 0x3c]
push eax
call fcn.0045b176
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0045ac91
add esp, 0xc
mov eax, dword [eax + 4]
mov byte [ebp - 4], 0x39
cmp eax, ebx
jne 0x427b88
mov eax, 0x4a3d2c
push eax
lea ecx, [ebp - 0x24]
call fcn.0040162c
push 1
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3b
call fcn.0042abf0
mov ecx, 0x513
xor eax, eax
lea edi, [ebp - 0x174a]
mov word [ebp - 0x174c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x174c]
push 0xa28
push eax
push ebx
push dword [ebp - 0x3c]
push ebx
push 0x1200
call dword [0x4a3330]
lea eax, [ebp - 0x174c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0047597f
mov edi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
push eax
call fcn.0047564d
add esp, 0xc
push edi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
push eax
call fcn.00403c40
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x3e
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3d
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.00401600
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3b
call fcn.00401600
push dword [ebp - 0x24]
mov ecx, esi
push str.Switch_keyboard_method
call fcn.00426a14
cmp dword [ebp - 0x18], ebx
je 0x427c59
cmp dword [ebp - 0x18], 3
je 0x427c59
push 2
jmp 0x427c5b
push 1
push ebx
push ebx
push ebx
push ebx
push 4
lea edi, [esi + 0x5c]
push ebx
push eax
mov ecx, edi
call fcn.0042a34b
lea eax, [ebp - 0x14]
push eax
call fcn.00411998
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x3f
push str.Translation_Method
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3b
call fcn.00401600
mov ecx, esi
call fcn.00425f58
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x35
call fcn.00401600
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.00401600
mov ecx, dword [ebp - 0x10]
call fcn.0047024b
test eax, eax
mov eax, str.Enabled
jne 0x427cca
mov eax, str.Disabled
push eax
push str.Auto_Check_For_Updates
mov ecx, esi
call fcn.00426a14
mov ecx, dword [ebp - 0x10]
call fcn.0047024f
push eax
push str.Check_For_Updates_Every_Days
mov ecx, esi
call fcn.004262a8
lea eax, [ebp - 0x14]
push eax
call fcn.00411560
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x40
push str.Last_Check
call fcn.00426a14
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00401600
mov ecx, esi
call fcn.004255d1
lea eax, [ebp - 0x34]
push 0x35
push eax
call fcn.0045f1c0
pop ecx
pop ecx
push dword [ebp - 0x34]
mov ecx, esi
mov byte [ebp - 4], 0x41
call fcn.00428294
mov dword [esi + 0x48], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040b8d0
mov byte [ebp - 4], 0x42
call fcn.0040b8e6
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00416942
push dword [ebp - 0x5c]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x43
push eax
call fcn.0047597f
add esp, 0x14
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x50]
push 0x4bc294
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x45
call fcn.00403ced
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x46
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00403c40
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x47
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x46
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.00401600
lea eax, [ebp - 0x20]
push 0xe6
push eax
call fcn.0045f1c0
push dword [ebp - 0x20]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x48
push eax
call fcn.0047597f
add esp, 0x10
push eax
lea eax, [ebp - 0x14]
push 0x4bc434
push eax
mov byte [ebp - 4], 0x49
call fcn.00403d51
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4a
call fcn.00403e31
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x49
call fcn.00401600
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x48
call fcn.00401600
push dword [ebp - 0x18]
mov ecx, esi
push str.Licensed_For
call fcn.00426a14
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x45
call fcn.00401600
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x44
call fcn.00401600
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
push eax
call fcn.0040c941
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.00401600
push dword [ebp - 0x2c]
mov ecx, esi
push str.Updates
call fcn.00426a14
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.00401600
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
push eax
call fcn.0040cb12
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x4e
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
push str.Left_days
call fcn.00426a14
lea eax, [ebp - 0x14]
push eax
call fcn.00413bba
pop ecx
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x4f
call fcn.004016c6
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.00401600
push dword [ebp - 0x10]
mov ecx, esi
push str.Launched_Count_Started
call fcn.00426a14
lea eax, [ebp - 0x40]
push eax
call fcn.004136f0
push dword [ebp - 0x40]
mov byte [ebp - 4], 0x50
call fcn.004169a0
pop ecx
mov byte [ebp - 0x19], al
pop ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401973
cmp byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x51
jne 0x427f33
push str.__not_found
lea ecx, [ebp - 0x2c]
call fcn.0040d37a
push dword [ebp - 0x2c]
mov ecx, esi
push str.License_File
call fcn.00426a14
xor ecx, ecx
cmp byte [ebp - 0x19], bl
setne cl
inc ecx
push ecx
push eax
mov ecx, edi
call fcn.00429cd3
lea eax, [ebp - 0x60]
push eax
call fcn.0040fa1d
pop ecx
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 0x52
push str.Current_P
call fcn.00426a14
lea ecx, [ebp - 0x60]
mov esi, eax
mov byte [ebp - 4], 0x51
call fcn.00401600
push 2
push esi
mov ecx, edi
call fcn.00429cd3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x50
call fcn.00401600
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4d
call fcn.00401600
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x44
call fcn.00401600
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x43
call fcn.00401600
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x42
call fcn.00401600
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x41
call fcn.00401600
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x32
call fcn.00401600
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00401600
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x1c
call fcn.00401600
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1b
call fcn.00401600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.00401600
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret