Function at 0x412a03
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push 8
call fcn.004197cc
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x4cd442
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412a6c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412aaf
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Cache
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412af7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412b3a
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.CD_Burning
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412b82
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412bc5
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Cookies
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412c0d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412c50
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Desktop
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412c98
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412cdb
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Favorites
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412d23
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412d66
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Fonts
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412dae
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412df1
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.History
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412e39
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412e7c
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Local_AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412ec4
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412f07
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Local_Settings
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412f4f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x412f92
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.My_Music
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x412fda
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x41301d
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.My_Pictures
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413065
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4130a8
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.My_Video
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4130f0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413133
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.NetHood
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41317b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4131be
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Personal
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413206
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413249
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.PrintHood
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413291
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4132d4
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Programs
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41331c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x41335f
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Recent
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4133a7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4133ea
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.SendTo
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413432
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413475
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Start_Menu
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4134bd
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413500
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Startup
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413548
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x41358b
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Templates
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4135d3
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413616
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Administrative_Tools
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41365e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4136a1
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4136e9
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x41372c
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Desktop
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413774
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4137b7
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Documents
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4137ff
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413842
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Favorites
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41388a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4138cd
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Programs
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413915
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413958
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Start_Menu
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4139a0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4139e3
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Startup
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413a2b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413a6e
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Common_Templates
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413ab6
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413af9
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.CommonMusic
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413b41
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413b84
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.CommonPictures
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413bcc
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413c0f
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.CommonVideo
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413c57
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413c9a
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.Temp
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413ce2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413d25
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.WinDir
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413d6d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413db0
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.System32
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413df8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413e3b
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.USERPROFILE
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413e83
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413ec6
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.ALLUSERSPROFILE
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413f0e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413f51
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.ProgramFiles
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x413f99
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x413fdc
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.CommonProgramFiles
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x414024
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x414067
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, str.SystemDrive
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4140af
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x4140f2
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004197c0
add esp, 8
mov eax, 0x4cdf41
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.0040125f
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41413a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.004197f6
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x41417d
push eax
mov ebx, eax
call fcn.004010bb
inc eax
push eax
call fcn.004197cc
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
cmp dword [ebp + 8], 1
jl 0x41419f
mov ebx, dword [ebp - 4]
call fcn.00401246
cmp dword [ebp + 8], eax
jg 0x41419f
xor eax, eax
jmp 0x4141a4
mov eax, 1
test eax, eax
je 0x4141b3
mov dword [ebp + 8], 1
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4141da
push 0x7f5
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4141f7
push 0x7f5
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x414214
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0x4cdf41
push dword [ebp - 0xc]
call fcn.00401182
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x414258
push ebx
call fcn.004197c6
add esp, 4
cmp dword [ebp - 0x10], 0
je 0x41427f
push 0
mov ebx, 0x419d20
call fcn.004197e4
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
jmp 0x414829
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4142a6
push 0x888
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4142c3
push 0x888
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x4142e0
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x414309
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x419ed0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41432f
push ebx
call fcn.004197c6
add esp, 4
push 0x4cd1c2
push dword [ebp - 0x10]
call fcn.00401182
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41435d
push ebx
call fcn.004197c6
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x41441f
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x41438e
push 0x8d6
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4143ab
push 0x8d6
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x4143c8
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4143f1
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x419ed0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x414417
push ebx
call fcn.004197c6
add esp, 4
mov eax, dword [ebp - 0x10]
jmp 0x414829
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x414446
push 0x91f
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x414463
push 0x91f
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x414480
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
push str.System32
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
push dword [ebp - 0xc]
call fcn.00401182
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4144e4
push ebx
call fcn.004197c6
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4144f4
push ebx
call fcn.004197c6
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x4145fa
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x419ed0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 8], eax
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x419ed0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push closesocket
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x4cd2fd
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x414571
mov eax, 0x4cd1c2
push eax
push 4
mov ebx, 0x41a200
call fcn.004197e4
add esp, 0x34
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x414597
push ebx
call fcn.004197c6
add esp, 4
fild dword [ebp - 0x10]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fsub qword [0x4cd4b5]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
call fcn.0040121f
push 0x80000301
push 0
push eax
push getpeername
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4145cc
mov eax, 0x4cd1c2
push eax
push 2
mov ebx, 0x419ef0
call fcn.004197e4
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4145f2
push ebx
call fcn.004197c6
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x414829
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x414621
push 0xa71
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41463e
push 0xa71
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x41465b
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 6
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x414690
mov eax, 0x4cd1c2
push eax
push 2
mov ebx, 0x419ef0
call fcn.004197e4
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4146b6
push ebx
call fcn.004197c6
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4146c9
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4146ef
push ebx
call fcn.004197c6
add esp, 4
push str.common
push dword [ebp - 0x14]
call fcn.00401182
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41471d
push ebx
call fcn.004197c6
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x414731
mov eax, 4
jmp 0x414736
mov eax, 3
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 4]
call fcn.0040125f
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x414760
push 0xb0e
push 0x40588e8
push 4
call fcn.004197d2
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41477d
push 0xb0e
push 0x40588e8
push 1
call fcn.004197d2
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x41479a
mov eax, 0x4cd1c2
push eax
push 1
mov ebx, 0x41a3b0
call fcn.004197e4
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov ecx, 2
call fcn.00401126
add esp, 8
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4147d8
push ebx
call fcn.004197c6
add esp, 4
push 0
push 0
push 0
push getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4147f1
mov eax, 0x4cd1c2
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 3
mov ebx, 0x41b970
call fcn.004197e4
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x414821
push ebx
call fcn.004197c6
add esp, 4
mov eax, dword [ebp - 0x2c]
jmp 0x414829
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x414848
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x414844
imul eax, dword [ebx]
jmp 0x414839
mov ecx, eax
test ecx, ecx
je 0x414867
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x414860
push ebx
push eax
call fcn.004197c6
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41484e
call fcn.004197c6
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 8