Function at 0x439470
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x544fd7
mov eax, dword fs:[0]
push eax
mov eax, 0x1fe4
call fcn.004741b0
mov eax, dword [0x672114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x4e
lea edi, [ebp - 0x37c]
mov esi, str.jRiQNaMggbsRjVaiPDfq9LIhaH7Rc6GlbzKPQU4WqVg0sTDsfXvOmgg9mp8dKXReAJ5YLTY65JqbdoXxYkk0uIBZnuuGbXkPs5VqtZtlZC496EUqo7eBpL56NaShWlWH8HBw5V2Qa19qrpAKbMT7FTe6j9QXGG5JjuxaULFgytR9EmeX6OvoLEEepgPkLjvG5Bd90a6lajILktIYVgo3F6UHvJoVgcKwkII6aQ0gXjwVysqzCkvotqAr3akyO8OSmUOZYGlQwAZKxYrTkVsKHXQvjWjpGWvye87ejIjMcZcgdhhobaNpvy6w2
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
mov esi, str.7gaZ4UNQKW3kd4DRjx8VEuxSh1IhCZkFKC1IohDR3phiT3xVcoDgm68CAXEMVSZ5SSOloPaQfbSD5099KvjkDJCSOGhLHMsOrpKRGb1ub5FI57McTphGEh49jdoGQ8no8fEvfT8GAbCgTNuV7evKPHa8vHRefq8I5TDVrRb0StjauRbC6MSA0O8oL68S4qJyg1l2Rn2XvfOKAkJwoSGFCoiLxxLTBZWUkF4PvWRA7FNHn1B6CD3r5GnaxlzSbJIZbPTzcRZBUhMY1JOCOMzzVFPcCiYPFIpN9wU2NwUtb0zfDI0XScpSGYqF4HRn3fLd09yGhAkxoXdlPMJ1bTWR0UZrn53fGbp333WPKM8GRYDNDmuqAsSWGpqYLDn7TP5AsByA0jED2q9YKKts38RdgmXUA26WYETPvB1rpfAKrehBICs3u8ecwgqFdOTjjsnteUofh32WLBVMro9PtvoOp
lea edi, [ebp - 0x9fc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x41
movsw word es:[edi], word [esi]
mov esi, str.XzlkBxKix57pYTKm1kiNdKyYvrT7kp9UyNRvhyNPCV1qoEp4bQPloKAh0uZdo9OuIRN0H5l0Ww4iCBB2EV6umxqveOW48q2aEVW4ADCqXDjOCCjC0kprZx0hCs9w2A9zu5sFDFE1S6Uf4WFiJgYxEPXl11EoCk6hQib7Xmvk7Q2c2c6449vazw0qHCuhfKLSmNGjcqNuMUwjjc2OhUlxnKxC6DnNBUAdoIXd38Hj7tjPdfAKLqOtTNHf8JG3ePIY4mi
lea edi, [ebp - 0x114]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x51
lea edi, [ebp - 0x4c0]
mov esi, str.FWXYmI5J86W02k2iW1fNCXywvHEESiZSKb9qaD2nvPnOnDBRFwTld8qBLwhZLxEB9F06DRaUIVolNLaRJOKKPZTyo2Syci0W5uWG3bRnpRSTbbfXcWRJkU2lKZiXQtBQTqJNllpTws7LZyiY0YqRDV41xzXBZlVaUP7gleZTENRmvOiYYwdMovlbunEne3DTeLcfVyB7f2GerAHMaJfrjU3dOqWbo4ny679enXBidsswp9jHuh4N6JZcJzPnjT3hxe1SJdQji0HrvJKvsBQAOqrorNcKzs5zfKLDUvzG0DqZeeq9dTqpfl3UZh8WSZFsReL
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6b
lea edi, [ebp - 0x824]
mov esi, str.GKVrQ6LyGrl0ylwVHp1VpgAB3HoQYFo9NxDaSjoStI6pmc1f1XZvH81ztY0DegkeamB5oPCdutDLsTWYfWWL0KTTH2jQ5ZjDBqTKBfLny5CgbPOGTtG4i2diBKYuMXWPgeJQZpdMYcScWFpITqj4kcaDPrpTd1Jj1dN72SwHy6bsHJ13x2VY3jYgqy04eUYbuznyZnyd1pDgtM8bZgFI8bOmK1Q22JNH2FgdteGVUvxZ09aJ655Ops7PFwQUliOblZKJmmymWOdfLiO6mwBMS8YVXVoQJQQqTB69TopeBt2MlSOplZuuFD2Doz9JCmTgJaMZx3zF9lhLrwS5Uh6AaA1XDum620c27qt3e6EWTu7KLHrQHbxjzRUDmQyrid7RZqE47djZR3WZdKjb2fZ4LcKtZATQAihR5BKSNhDvbd0oh
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4a
movsw word es:[edi], word [esi]
mov esi, str.kjP4GtVauyzFrDmETx3Bxhpbske3yFVfqBhvvVxbeEATO8VImQUjVO7YnuUQTSFLZ7IRgbA9dERwnhbkU9amivM1kEbE9G6gXKuaFEEOEnP8iDgWRZZBEGNMPykPho6A1fqJlSHoPq9SQq4jNOSpbpx6fkQHN4XI68IJqSJnhYnbzDl3UOdDwYRYOMVVfZGyXPezeDVIxabqofYbOCirN6EcEfr1Nwpb4M4Mb4OAOxFKBQlxA6dRWRa1tQzU82Y0QLaTx7CZ12v6oXIRCNick9N0wqhBUaNmRwCAVhy4K
lea edi, [ebp - 0x240]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
movsw word es:[edi], word [esi]
mov esi, str.sqkZokoHzUXpAHn8vkqKlniqp4ZBa4QNqSLsrKHYdyJfBpMzgAEOivDh6fvB7kifZZg5yRxBNJG3KjiDgcO4UvGXQSOxwp4VctSd2PWPZ0tr9MZKgdk3WTZ5li4n4dVMwts14KcJhBGvgNVHqkqHLXEbWapqyxoZIyp6mg9MVct2mUsiOvjNnQM3bsx5cIQJfD0Ow6odDRPSnqOV0y34qgr69xMMA24bM8vs87JaFVLlpElVzj8AeT7yYz2QIcKfBhCpWZuXeMhgtBg5jlAI4GsCpiGWg1t6lXKwXHg2SkCNnATjPcq9lAyGFktDwC4fFHJb1qLI1dhujrsmGjECVLiqbIulAWbOgR7TYPDFe1sPZHoP5poO2OJDpLZ36Lta2eorHWQiLjlY9VNjQ599PAFy9c7Gjs5GoNGVKWJcg90zQx9oNRruI2WBv
lea edi, [ebp - 0x16f0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
movsw word es:[edi], word [esi]
mov esi, str.DJHmAZYdsvZIEXnGbRWEkFuYcGxUEcDxLjknXhDQcX2HF4NWfAnL31WluyIThzVhi0T8UrFXQRvs66IMwd4IkivYl4wifO21n2JcSYAlJvFF3wMQQ7FMHtjOhu3xVJjeHsCeSjguVWIjxLHEvruKf0oAJajn9mtSBCubeHf0sOo9i7nShifDNXArFlYv9mgnVFf5lU45qbeHlA1LJh5wJgUwHbCmCnPHwtKNgBVjlcAYEIn4VEg5hFcn46KjNuSgemOSKx0AO58nUGvuha0f3Ay3esWMIMYAY5dgAocJLBMN0K0I0Q1V81nt7ay81lpxzyH4w1F6Saw0ZnMcMRlOVYj120veS6DyiyBryR2862R5g1FhDLdvmaYmtJIycqQZM6Ncqb4mlMlpx9pohrlOPNTpL7YJ8u6yiu7idwUW3BOS41GxxsNKRoa
lea edi, [ebp - 0x1378]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6f
lea edi, [ebp - 0x18ac]
mov esi, str.1bxBOf64HgiLHWOl6E1zVp3BdKowouroSDWEqNeXHvEM7eSGeYGefhEFLwwEYjcyur5wZXWkkGsc8yzjYLdaFprGUDlJ3C5L5HG77C8K309jFR0l2ksO9hhNRsZ0IKIwrppl03TKYvI4orjrqOnNhiOaUMs9HXAYaIcEf4H3y6NsWI1mF9tJYjACBbt5IgPwB8cQAasdWkE6O3c7VaSu8IFYgGCHomxCgjiuPG41r3FZ6pdKknIUjsnq6Okag0RYy4J2iaXIlom1DMMYqIqlrUdDOfnNiylNgUPep3zaa0ereBNM5DAZ8FnsaGsOatH9xaRBviXnaZRuuTuvofQ3rLhqCuwaeL5sHLVJGM1QLWNOqI1b6vcEsPUwRuIGD4cWGIpgQoINwM3S6Rt780oGbQGmpvbjMNYVLD8nrX04HAEl1Tui2VDEJhbLKBN
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
lea edi, [ebp - 0x1fcc]
mov esi, str.Nx9QSq2hQltOUyWEGfMuPRNyE7tOS1SVmgfdjJBW9a1GWIDijIIxbqCGWGIJTAWI4az4A5e3gntNVHTXXGbfGIxpJn5ZMaocFiPMZObN0qTeRGrkT4r9DiYJerCDwqjZHIkKx34hjJXT8laaWBIi4exy9YdwkTPMYjlfuFTbH0tP6p4B33OCNCocUtR1SQg3VtJgezeCqBqNkOPWE38QMRn1v7WSX2ygqSqudXZZwP0WmTqzG2Bty4KEKIUwbFIK7ncHGP74H4l9KNRaiH6i5JGus1Z6GuvcNHimBNWa2BuQlCoyINEvMN4sXoH85aOxh1r8uQuiMw6SvvkDlA358N2q9vFvitv8DcDBmzQyew3KY9f7ivaLMMb7HIjJfqXHFcaab6Czmxh44sSQVXDxWWNz7NbencOynQGgr7unrfipdnGkiY3sYEM0JsAmDWqnQFaWArkd6CT606eM
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
movsb byte es:[edi], byte [esi]
mov esi, str.BSyY5aneoaKvfYWd4Tc4D5fRxdyvNi7nDwtGbow7q9hHrab0TXv7mNkd1EjGQY0LylNRXX8Gm9ElVuAXD6waBkqHlSiYrimLi9NjGipMJIKSYkJPxtILyTeLQo4PzArx2tS0LCjmuDtpiO5QJoIY6nhXeuJxTrePojXJV3fW848WEL0UVdCzQAh0guD2UXWHTbt4YgfxPLuVNDXrH6jLPlherS6kYifb1ZlvXzhS21NxWkoC8JzZsFWp3L93D5eYve3yjruaOa1ggHb73yDxR21wyB7sENW24Yrd5AVDSaq6jYDSoUNxRsXNiUm4AiGN9DUhfWNtT5SxzhvjC4tEaBZJPtBz18fudmMAcqREb796KCWmSmuBBRRRlL7gYPpdidajtL0CBPUfyatIZ2D3aV5qAsl9eoxmRiwQq7Qv2FNAKFzFtiOWdPGs
lea edi, [ebp - 0x1534]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x53
movsb byte es:[edi], byte [esi]
mov esi, str.m5OsYCdPFeUfLfgO3g9etkufESEinuxbtErSDkoiuhMYvBvq6egmKCBmxWdRNthAW5nHduA30KTJuNmv2RaXOlAepsdFtkw5CtV4lBJLX44eAFkxyF3tYOjCYNfiO2LfjBnVv6b17whzjUftrGkPWpckYcdwhJWL5llE9GHrLG1xyXRPMqfMQGA2H2hIHEFOPZK9A9RgFyyzKEqjlUPWZCrcIkrHSeHGyKWD6O3vTKDeZMsb0Qno3xrS56TMl2Gelzfjqc1yZJ6tU8sdo4e58mA8ZhmzYmUXhKs1n7fXN91AHfgF9p0GzxtOmeYse3FCmGrz6kuFr0fCL
lea edi, [ebp - 0x1028]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x70
movsw word es:[edi], word [esi]
mov esi, str.ezYnj2Hm4S3y4SrwlxCeSTX0QemCwPoRnRWwn5zAXryJcFCTzrRFn9GSXihNSW6XDqMvIc9UCpbJiu67VPgWE69lmubZDmbLG6lnG8DRpFHMc5ONZvHUYFi9X6OAFUdH8cncQrUOyAHuYJ6wRBY4pxAhc21O0yVsUnVyUUrR8zHw3n4vTxBoH1X8FMlTxJNjCjk9ksL35ovdnkG0Y9S3yYfI8eC48VnLcyK9bzlL075eS4Uu6JPYRqDw4hN1dYUU8cCjv5KmV1E6EEYQSa9mF9ShLd9hLFkpYh5mMtcr8ZYP2nyoO4S4BSeiXmKXMUplTyoya7LAhKxoq6JPIrY8hHjYTxAVOg3QX4sKCA1d7d6N4KmyisG1IvyT982M1KEiy9niK6Lb8jD7Hy9g0Jos4kDgVxebTML6txoQG4CskG8Q7Cu43UMNx2oSyCSwhIAG
lea edi, [ebp - 0x1a70]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x46
movsb byte es:[edi], byte [esi]
mov esi, str.OedsZKfVH38qEhuR1aV3Go135fUN2TCNnRuS0d4ETxpaPQHMITT5XjUCHn67qZFxdIxRKI5Dbarbke4MkZch8Meogu7OM6QrqQPVxJNYOSZfINqzvuIBqNiXg8M8tOANRmZdq0j5udTTgysOIJs6xkJ0onJX33GpSPy1APAcZZxb1XwgqWFMSSPRiO3HJLFLrp8mS4xgAnGvPmAZPhVV8jbw8nbCa9REaNN7EsaBHhGsRkNho68DYGW1Q4eNk3sh1ArnHtkCH4BCqV50YHwMB60s
lea edi, [ebp - 0xb18]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x65
movsb byte es:[edi], byte [esi]
mov esi, str.7gYELqww0LQzRu7cCtD4Z4UnEIVV0gORRzbZRwPscRCxyrJ4qikOl4D4UHwrKHPZEV1nU4VUHcRnnAroPK9BAPS60HXzU6RiclANzvIqzbrjXx47EUp1WK1aTHP4YadRKOa8twYbkCuCJqmSpvVvd52DFEmaodX5CkhripfapgLLBm70lFaTeNchbXzXxandcRVnPdh62eo6W3nthnu9xNcDBsxpvOtuEtjWODfDenZEKWgo2m3D0jakwEnVwpjJkLbN72FgpWL8TvIMjTJRTGOqmSLqbkmk5bLlGVx8GLA2ga8aZ1KMP7O8q9H3dC88BGAeQc0me5AFPoPkiCya2wZD3wtBGqr26NYN7MsBqj5gu4mXKZsPaSqmYVQKoTUuBe16vSvngJIiL352gVDkP0
lea edi, [ebp - 0x11c0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x70
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.oJ5r3xD7VWKphno1ybad61mPxUgqQFRIRINnbIJgg7QJM3TxGY9wqYj4uGdbqP6Q8yHPrIsfkSongTIjUohZrevPVIB1533PsOcEe7uWKTtruTBP8wX40tnGDQBGWCnhB1l8gTkeqoOr1l3VhCtWjPMebBtPReLbmlKIiV5hFmWT68AxAHsVhvX458cAdEyXdv6N7PiNG6wYEim4VzZqpLoy6CZH1vcnuITM9Z0Bhf2iZ3DIRbjhcvnpZnyOPMKHtz59ZCtfjyyRvGPXnLgT1cVYRQ3jq9BnhMYVgiKVbbwCDDjw7dFPDQQQYtD9t2DgPw4Tzwed6cCFlOPPfI7OuB3tHCemyRFIqh1p0Zb9ZuSkS1JIcjCawyAv1AdYaMstf7BECm4C2WWFmoKMQZ1pgs3xen4fZlyHX6o5khzuJVeKVW5a5095sj9mrPC6PNvZz
lea edi, [ebp - 0x1c34]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x36
movsw word es:[edi], word [esi]
mov esi, str.Ncs4StohZOWtBuuzDmmONPglQhrQyhk3S7MPbsAK5bOrbloEcWwUisrW1iAkvDuAsRa8NfvjOnIpzUuOG8cZxkOSK2wI3ao1Qm6aLYWmb9TbgtvAsQfimVl4BlSquAeIuUs1WZGDVPbrHnRzyM5Qgi8DHPrKkNu316hy0sly8lRttTpQ3XGMoRlhVcncjnCXs2x3SAw4Xy2jjmYyEhJdVpiB56
lea edi, [ebp - 0x674]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x35
mov dword [ebp - 0x1ff0], 0
mov dword [ebp - 0x1fec], 0
mov dword [ebp - 0x1fe8], 0
movsb byte es:[edi], byte [esi]
mov esi, str.ypO7IYq3IhxKk13qe5wDxCCCLzpwzApsdkWjo6SCzsFYrZuEMILrgDzF53kxd3k9YXaANekG1ARxFFMRHrtGxTq8mUW2KN57NUdVZUjIZ77BHqrek48PGVKbmGJmDlckmuIuTdTyys53yLI0cOkph9aNCxTXc9On94Pdd5ewaMXefo3T46zzg1I65aKCXMjH82lHWdDPCD9eFsUGvDcZp
lea edi, [ebp - 0x598]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x70
movsw word es:[edi], word [esi]
mov esi, str.W6sLswIyxg7DLjin4J5O60WsYGYcg5LqXElzQxOMDH66FJ9RKNciERkFKqN5Vdk3NigqAzd8T3GFecp20nbmHWb0KnhZnBk33aFKoc5C0MhXXrEHNBAxekodxdNtSAscXsWyjerDvXdPsV33D1Uhhy39AAG3K7W1nmFU73HnlsdAN0OpGSv1aQSVT1KibU86vbZH0TVHGNyDP73LYrU6Z0ZipWGTILkGLlUpmdV6WArqOvKQbeMCQJUxJTBSev4Dq08TC8G0dBdk0McVi4Cs2ueKolfESo1cQNaYmjin5J6wGL7vHua9DmxhNvdD8oXedgm3mFBwVesaoNx5encudsVZol8t5iUqnPaoLKBHloVj1B3yA5ia5ntmCoJYThFhG22NRQY0NctQCezIj3wJvpzX8BJqCIER5TGL64HgJn8gs0mDLcrkjnA44Nkc7atpzD
lea edi, [ebp - 0x1df8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4e
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.SIwsZFeL0jMtWGlP85kj7jOnaohSAB8rFfrmhmUWU7N9CWycrrMBxe5LO1oF9Paq6NDP0JzE3mPHsoCyY2CvrKZUXwILOwYVXPOwcokhcoXw0oG94mfQmnKJ0ZKuEcgkN5ysYODj0Uk8fz66KxUlD7Dpqhnsqf4r9lVzE2eOUMFZZykq5rQHg89XwmZYwIL0EzpK80XCsgxgmdpp1dZ0mu7OqbT0nJicdasSbWyaiRgLSKdQRv6TELeW1oMak65vWNoQIBl0Pxxq12UC2FE27mCO6WcWUGbpir4E81eqn0fNL3jh88T2Lhu
lea edi, [ebp - 0xc50]
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x37c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x439676
xor ecx, ecx
jmp 0x439689
lea ecx, [ebp - 0x37c]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439680
sub ecx, edx
push ecx
lea eax, [ebp - 0x37c]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4396d4
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
cmp byte [ebp - 0x9fc], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x4396fc
xor ecx, ecx
jmp 0x43970e
lea ecx, [ebp - 0x9fc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439705
sub ecx, edx
push ecx
lea eax, [ebp - 0x9fc]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439759
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
cmp byte [ebp - 0x114], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x439781
xor ecx, ecx
jmp 0x439799
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439790
sub ecx, edx
push ecx
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4397e4
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
cmp byte [ebp - 0x4c0], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x43980c
xor ecx, ecx
jmp 0x43981e
lea ecx, [ebp - 0x4c0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439815
sub ecx, edx
push ecx
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439869
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
cmp byte [ebp - 0x824], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x439891
xor ecx, ecx
jmp 0x4398a9
lea ecx, [ebp - 0x824]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4398a0
sub ecx, edx
push ecx
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4398f4
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
cmp byte [ebp - 0x240], 0
mov dword [ebp - 0x1fd0], 0xf
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 0x1fe4], 0
jne 0x43991c
xor ecx, ecx
jmp 0x43992e
lea ecx, [ebp - 0x240]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439925
sub ecx, edx
push ecx
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00407f10
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439979
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x16f0]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4399c3
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1378]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439a0d
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x18ac]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439a57
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1fcc]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439aa1
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1534]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439aeb
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1028]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439b35
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1a70]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439b7f
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439bc9
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x11c0]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
mov eax, dword [ebp - 0x1fd0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439c13
inc eax
lea ecx, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x1fe4]
call fcn.00408010
lea eax, [ebp - 0x1c34]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x674]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x598]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x1df8]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0xc50]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004057d0
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.00408170
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405a30
call fcn.0042fbf0
mov ecx, eax
call fcn.004176e0
test eax, eax
je 0x439e08
xor ecx, ecx
mov dword [ebp - 0x1fd0], 7
push 0xffffffffffffffff
push ecx
add eax, 0xd8
mov word [ebp - 0x1fe4], cx
push eax
lea ecx, [ebp - 0x1fe4]
mov dword [ebp - 0x1fd4], 0
call fcn.00402880
push 0x288
lea eax, [ebp - 0xed8]
push 0
push eax
call fcn.004f0ae0
add esp, 0xc
xor ecx, ecx
movzx eax, word [ecx + str._e__select_]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0xeda], ax
test ax, ax
jne 0x439d83
cmp dword [ebp - 0x1fd0], 8
lea eax, [ebp - 0x1fe4]
cmovae eax, dword [ebp - 0x1fe4]
mov esi, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x439db0
lea edi, [ebp - 0xed8]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x439dc6
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
mov ecx, eax
lea eax, [ebp - 0xed8]
push eax
push str.explorer
and ecx, 3
push str.open
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1fe4]
call fcn.004024b0
mov eax, dword [ebx + 0x524]
xor ecx, ecx
mov esi, dword [ebx + 0x520]
mov edi, eax
sub edi, esi
xor ebx, ebx
add edi, 3
shr edi, 2
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x439e43
nop dword [eax + eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x439e3b
mov eax, dword [ecx]
call dword [eax + 8]
inc ebx
add esi, 4
cmp ebx, edi
jne 0x439e30
lea ecx, [ebp - 0x1ff0]
call fcn.00405a70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474193
mov esp, ebp
pop ebp
ret