Function at 0x40aff9
Capabilities:
Create thread

Disassembly:
sub esp, 0x854
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x84c], eax
push ebx
push ebp
push esi
push edi
cmp ecx, 0x2985
jg 0x40b0f8
je 0x40b050
add ecx, 0xffffd897
cmp ecx, 0x39
ja case.default.0x40b107
movzx eax, byte [ecx + 0x40b58c]
jmp dword [eax*4 + 0x40b4fc]
push 0
push 0
push 0x130b
push 0x2763
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 5
jne 0x40a4d1
push 0xb
jmp 0x40a4d3
push 0xa
push 0xf
push 0x4e5a00
push dword [0x4e6030]
call fcn.00401149
jmp case.default.0x40b107
mov dword [0x4d583c], 1
push 0
push 0x40e410
push dword [0x4e6030]
push str.IDD_FILETYPE
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x40b107
push 0
push 0x40e410
push dword [0x4e6030]
mov dword [0x4d583c], 2
push str.IDD_FILETYPE
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x2778
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 0
push 0x2779
push dword [0x4e6030]
call edi
push eax
call esi
jmp case.default.0x40b107
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x277b
push dword [0x4e6030]
call edi
mov edx, str.TRASHFILES
mov ecx, eax
call fcn.0040f180
jmp 0x40a545
mov edx, str.TRASHFILESD
mov ecx, str.TRASHFILES
call fcn.0040f390
test eax, eax
je 0x40a53f
call fcn.0040d9d0
jmp 0x40a53f
mov dword [0x4d583c], 0xb
jmp 0x40a4f4
push 0
push 0x40e410
push dword [0x4e6030]
mov dword [0x4d583c], 0xc
push str.IDD_FILETYPE
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x277d
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 0
push 0x277e
push dword [0x4e6030]
call edi
push eax
call esi
jmp case.default.0x40b107
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x2780
push dword [0x4e6030]
call edi
mov ecx, eax
call fcn.0040ef80
jmp 0x40a5ec
push 1
mov edx, str.TRASHFOLDERSD
mov ecx, str.TRASHFOLDERS
call fcn.0040f4d0
add esp, 4
test eax, eax
je 0x40a5e6
push 0
mov edx, str.TRASHCHECKDEF
mov ecx, str.TRASHCHECK
call fcn.0040f4d0
add esp, 4
call fcn.0040d540
jmp 0x40a5e6
mov dword [0x4d583c], 0x15
jmp 0x40a4f4
push 0
push 0x40e410
push dword [0x4e6030]
mov dword [0x4d583c], 0x16
push str.IDD_FILETYPE
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x2782
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 0
push 0x2783
push dword [0x4e6030]
call edi
push eax
call esi
jmp case.default.0x40b107
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x2785
push dword [0x4e6030]
call edi
mov edx, str.EXCLUDEFOLDERS
mov ecx, eax
call fcn.0040f180
jmp 0x40a6aa
mov edx, str.EXCLUDEFOLDERSD
mov ecx, str.EXCLUDEFOLDERS
call fcn.0040f390
test eax, eax
je 0x40a6a4
call fcn.0040d7f0
jmp 0x40a6a4
push 0x4e5e28
push 0x4b32e4
push str.Remove
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 0x4b35b4
jmp 0x40a71e
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x4e5e28
push 0x4b35b0
push str.Remove
push str.SFOPTIONS
call esi
mov edx, 0x4b3320
mov ecx, str.FILE
call fcn.00478640
lea edx, [esp + 0x58]
mov ecx, eax
call fcn.004770b0
test eax, eax
je 0x40a78f
push 0x4e5e28
lea eax, [esp + 0x5c]
push eax
push str.Folder
push str.SFOPTIONS
call esi
call fcn.0040e370
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.Confirm
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a7de
push 0x4b3320
push str.Confirm
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.Confirm
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.ZeroFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a83d
push 0x4b3320
push str.ZeroFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.ZeroFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.EmptyFolders
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a89c
push 0x4b3320
push str.EmptyFolders
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.EmptyFolders
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.Logfiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a8fb
push 0x4b3320
push str.Logfiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.Logfiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.StartMenu
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a95a
push 0x4b3320
push str.StartMenu
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.StartMenu
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.ProgramFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40a9b9
push 0x4b3320
push str.ProgramFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.ProgramFiles
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.WinSystem
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40aa18
push 0x4b3320
push str.WinSystem
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.WinSystem
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4e5e28
push 3
lea eax, [esp + 0x54]
push eax
push 0
push str.CleanDir
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40aa77
push 0x4b3320
push str.CleanDir
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
push 0x4b32e4
push str.CleanDir
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp case.default.0x40b107
mov eax, dword [0x4e4f34]
cmp eax, 0xe7
jl 0x40aaa4
cmp eax, 0xe9
jle 0x40aac2
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x2769
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 5
push 0x276a
push dword [0x4e6030]
call edi
push eax
call esi
lea eax, [esp + 0x4c]
mov dword [0x4cc1c8], 1
push eax
push 0
push 0
push 0x40f680
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
cmp dword [0x4cc1c8], 0
je case.default.0x40b107
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x276a
push dword [0x4e6030]
mov dword [0x4cc1c8], 0
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 5
push 0x2769
push dword [0x4e6030]
call edi
push eax
call esi
jmp case.default.0x40b107
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b40c8
mov ecx, 0x4b32d0
mov ebp, eax
call fcn.00478640
mov ebx, dword [sym.imp.USER32.dll_AppendMenuW]
push eax
push 0x2988
push 0
push ebp
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0
push 0x755a
push dword [0x4e5c0c]
call edi
mov esi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x2988
push ebp
call esi
mov edx, 0x4b40d0
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push 0x2989
push 0
push ebp
call ebx
push 0
push 0x7530
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x2989
push ebp
call esi
mov edx, 0x4b40d8
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push 0x298a
push 0
push ebp
call ebx
push 0
push 0x7549
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x298a
push ebp
call esi
push 0
push 0
push 0x800
push ebp
call ebx
mov edx, 0x4b3b00
mov ecx, str.MAINMENU
call fcn.00478640
push eax
push 0x7540
push 0
push ebp
call ebx
push 0
push 0x7540
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x7540
push ebp
call esi
cmp dword [0x4e59f8], 0
jne 0x40ac70
mov edx, str.View
mov ecx, ebp
call fcn.00462c70
lea eax, [esp + 0x4c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0
push dword [0x4e6030]
push 0
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push 2
push ebp
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push ebp
mov esi, eax
call dword [sym.imp.USER32.dll_DestroyMenu]
mov eax, esi
jmp 0x40b4e3
mov eax, dword [0x4e4f34]
cmp eax, 1
jne 0x40acd3
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.default.0x40b107
cmp eax, 0xe7
jl 0x40ace1
cmp eax, 0xe9
jle 0x40acff
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 1
push 0
push 0x1013
push 0x276f
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x4c]
push eax
push 0
push 0
push 0x410e20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
mov eax, dword [0x4e4f34]
cmp eax, 1
je 0x40acb0
cmp eax, 0xe7
jl 0x40ad59
cmp eax, 0xe9
jle 0x40ad77
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea eax, [esp + 0x4c]
push eax
push 0
push 0
push 0x411120
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
mov eax, dword [0x4e4f34]
cmp eax, 0xe7
jl 0x40ada7
cmp eax, 0xe9
jle 0x40adc5
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x279d
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 5
push 0x279e
push dword [0x4e6030]
call edi
push eax
call esi
lea eax, [esp + 0x4c]
mov dword [0x4cc1cc], 1
push eax
push 0
push 0
push 0x412e50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x279e
push dword [0x4e6030]
mov dword [0x4cc1cc], 0
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
push 5
push 0x279d
push dword [0x4e6030]
call edi
push eax
call esi
push 0
push 0x279e
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 0
push 0x279d
push dword [0x4e6030]
call edi
push eax
call esi
jmp case.default.0x40b107
push 0x4e5e28
push 6
lea eax, [esp + 0x54]
push eax
push 0
push str.ShortcutDesktop
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
cmp word [esp + 0x4c], 0x31
push 0x4e5e28
jne 0x40aec9
push 0x4b3320
push str.ShortcutDesktop
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 1
jmp 0x40aee0
push 0x4b32e4
push str.ShortcutDesktop
push str.SFOPTIONS
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0
push 0x2776
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp case.default.0x40b107
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov edx, 0x4b40d8
mov ecx, 0x4b32d0
mov ebp, eax
call fcn.00478640
mov ebx, dword [sym.imp.USER32.dll_AppendMenuW]
push eax
push 0x298c
push 0
push ebp
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0
push 0x7549
push dword [0x4e5c0c]
call edi
mov esi, dword [sym.imp.USER32.dll_SetMenuItemBitmaps]
push eax
push 0
push 0x298c
push ebp
call esi
mov edx, 0x4b40d0
mov ecx, 0x4b32d0
call fcn.00478640
push eax
push 0x298b
push 0
push ebp
call ebx
push 0
push 0x7530
push dword [0x4e5c0c]
call edi
push eax
push 0
push 0x298b
jmp 0x40ac18
mov eax, dword [0x4e4f34]
cmp eax, 1
je 0x40acb0
cmp eax, 0xe7
jl 0x40af9d
cmp eax, 0xe9
jle 0x40afbb
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 1
push 0
push 0x1013
push 0x27a3
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x4c]
push eax
push 0
push 0
push 0x413ba0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
mov eax, dword [0x4e4f34]
cmp eax, 1
je 0x40acb0
cmp eax, 0xe7
jl 0x40b015
cmp eax, 0xe9
jle 0x40b033
push 0
push 0x472350
push dword [0x4e6030]
push str.NAGSCREEN
push dword [0x4e5c0c]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea eax, [esp + 0x4c]
push eax
push 0
push 0
push 0x413fe0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp case.default.0x40b107
mov eax, dword [0x4b4118]
movq xmm0, qword [str.__C:_]
mov dword [esp + 0x60], eax
mov ax, word [0x4b411c]
push 0xba
mov word [esp + 0x68], ax
lea eax, [esp + 0x6a]
push 0
push eax
movq qword [esp + 0x64], xmm0
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x2776
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push 0x2776
push dword [0x4e6030]
mov dword [esp + 0x3c], 0x64
call edi
push eax
call esi
mov eax, dword [0x4e6030]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x60], 0x5c
jmp 0x40b496
add ecx, 0xffffd67a
cmp ecx, 9
ja case.default.0x40b107
jmp dword [ecx*4 + 0x40b5c8]
mov eax, dword [0x4b4118]
movq xmm0, qword [str.__C:_]
mov dword [esp + 0x60], eax
mov ax, word [0x4b411c]
push 0x1fa
mov word [esp + 0x68], ax
lea eax, [esp + 0x6a]
push 0
push eax
movq qword [esp + 0x64], xmm0
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x2776
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x1073
push 0x2776
push dword [0x4e6030]
mov dword [esp + 0x3c], 0x104
call edi
push eax
call esi
mov eax, dword [0x4e6030]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x60], 0x5c
mov dword [esp + 0x1c], str.explore
jmp 0x40b49e
mov dword [0x4cc1cc], 3
call fcn.00466080
mov dword [0x4cc1cc], 2
jmp case.default.0x40b107
call fcn.0040d7f0
jmp case.default.0x40b107
call fcn.0040d9d0
jmp case.default.0x40b107
call fcn.0040d540
jmp case.default.0x40b107
mov ecx, 0x276f
call fcn.00476ef0
jmp case.default.0x40b107
push 0x7fc
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0
push 0
push eax
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x276f
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
xor ecx, ecx
mov dword [esp + 0x2c], 0x400
cmp eax, 0xffffffff
cmovne ecx, eax
push ecx
push 0x1073
push 0x276f
push dword [0x4e6030]
call edi
push eax
call esi
mov eax, dword [0x4e6030]
xorps xmm0, xmm0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x58]
movlpd qword [esp + 0x34], xmm0
movlpd qword [esp + 0x3c], xmm0
movlpd qword [esp + 0x44], xmm0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], str.notepad.exe
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 5
mov dword [esp + 0x30], 0
jmp 0x40b4c3
push 0x7fc
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0
push 0
push eax
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x276f
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ecx, eax
push ecx
push 0x1073
push 0x276f
jmp 0x40b46e
push 0x7fc
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0
push 0
push eax
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x27a3
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
xor ecx, ecx
mov dword [esp + 0x2c], 0x400
cmp eax, 0xffffffff
cmovne ecx, eax
push ecx
push 0x1073
push 0x27a3
push dword [0x4e6030]
call edi
push eax
call esi
mov eax, dword [0x4e6030]
xorps xmm0, xmm0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x58]
movlpd qword [esp + 0x34], xmm0
movlpd qword [esp + 0x3c], xmm0
movlpd qword [esp + 0x44], xmm0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], str.notepad.exe
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 5
mov dword [esp + 0x30], 0
jmp 0x40b4c3
push 0x7fc
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0
push 0
push eax
call fcn.0048fb10
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 0xc
push 2
push 0xffffffffffffffff
push 0x100c
push 0x27a3
push dword [0x4e6030]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
lea ecx, [esp + 0x58]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x10]
push ecx
xor ecx, ecx
cmp eax, 0xffffffff
cmovne ecx, eax
push ecx
push 0x1073
push 0x27a3
push dword [0x4e6030]
mov dword [esp + 0x3c], 0x400
mov dword [esp + 0x2c], 0
call edi
push eax
call esi
mov eax, dword [0x4e6030]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x58]
mov dword [esp + 0x1c], str.properties
xorps xmm0, xmm0
mov dword [esp + 0x20], eax
movlpd qword [esp + 0x34], xmm0
movlpd qword [esp + 0x3c], xmm0
movlpd qword [esp + 0x44], xmm0
movaps xmm0, xmmword [0x4c7840]
movups xmmword [esp + 0x24], xmm0
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x3c
push eax
mov dword [esp + 0x18], 0x4c
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov eax, 1
mov ecx, dword [esp + 0x85c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x854
ret