Function at 0x45c922
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push 8
call fcn.00481cb0
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x5305b8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45c98b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45c9ce
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Cache
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45ca16
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45ca59
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.CD_Burning
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45caa1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cae4
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Cookies
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cb2c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cb6f
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Desktop
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cbb7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cbfa
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Favorites
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cc42
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cc85
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Fonts
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cccd
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cd10
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.History
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cd58
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cd9b
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Local_AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cde3
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45ce26
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Local_Settings
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45ce6e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45ceb1
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.My_Music
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cef9
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cf3c
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.My_Pictures
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45cf84
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45cfc7
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.My_Video
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d00f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d052
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.NetHood
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d09a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d0dd
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Personal
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d125
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d168
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.PrintHood
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d1b0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d1f3
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Programs
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d23b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d27e
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Recent
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d2c6
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d309
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.SendTo
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d351
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d394
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Start_Menu
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d3dc
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d41f
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Startup
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d467
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d4aa
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Templates
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d4f2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d535
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Administrative_Tools
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d57d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d5c0
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_AppData
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d608
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d64b
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Desktop
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d693
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d6d6
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Documents
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d71e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d761
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Favorites
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d7a9
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d7ec
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Programs
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d834
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d877
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Start_Menu
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d8bf
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d902
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Startup
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d94a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45d98d
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Common_Templates
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45d9d5
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45da18
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.CommonMusic
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45da60
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45daa3
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.CommonPictures
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45daeb
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45db2e
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.CommonVideo
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45db76
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45dbb9
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.Temp
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45dc01
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45dc44
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.WinDir
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45dc8c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45dccf
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.System32
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45dd17
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45dd5a
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.USERPROFILE
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45dda2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45dde5
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.ALLUSERSPROFILE
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45de2d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45de70
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.ProgramFiles
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45deb8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45defb
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.CommonProgramFiles
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45df43
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45df86
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, str.SystemDrive
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45dfce
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45e011
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.00481ca4
add esp, 8
mov eax, 0x533b1e
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0xc], ebx
call fcn.00401753
mov dword [ebp - 0x10], ecx
mov edi, dword [ebp - 0xc]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x45e059
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0xc]
call fcn.00481cc8
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x10]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 8]
push edi
test eax, eax
je 0x45e09c
push eax
mov ebx, eax
call fcn.0040179a
inc eax
push eax
call fcn.00481cb0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e0c6
push 0x753
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e0e3
push 0x753
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x45e100
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0x533b1e
push dword [ebp - 0xc]
call fcn.0040147d
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e144
push ebx
call fcn.00481cb6
add esp, 4
cmp dword [ebp - 0x10], 0
je 0x45e16b
push 0
mov ebx, 0x4820f0
call fcn.00481caa
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
jmp 0x45e715
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e192
push 0x7e6
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e1af
push 0x7e6
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x45e1cc
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x45e1f5
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4822e0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e21b
push ebx
call fcn.00481cb6
add esp, 4
push 0x53034a
push dword [ebp - 0x10]
call fcn.0040147d
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x45e249
push ebx
call fcn.00481cb6
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x45e30b
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e27a
push 0x834
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e297
push 0x834
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x45e2b4
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x45e2dd
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4822e0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e303
push ebx
call fcn.00481cb6
add esp, 4
mov eax, dword [ebp - 0x10]
jmp 0x45e715
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e332
push 0x87d
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e34f
push 0x87d
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x45e36c
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
push str.System32
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
push dword [ebp - 0xc]
call fcn.0040147d
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e3d0
push ebx
call fcn.00481cb6
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x45e3e0
push ebx
call fcn.00481cb6
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x45e4e6
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x4822e0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 8], eax
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x4822e0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push getpeername
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x53061e
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x45e45d
mov eax, 0x53034a
push eax
push 4
mov ebx, 0x482510
call fcn.00481caa
add esp, 0x34
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e483
push ebx
call fcn.00481cb6
add esp, 4
fild dword [ebp - 0x10]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fsub qword [0x530424]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
call fcn.00401773
push 0x80000301
push 0
push eax
push getpeername
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x45e4b8
mov eax, 0x53034a
push eax
push 2
mov ebx, 0x482300
call fcn.00481caa
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x45e4de
push ebx
call fcn.00481cb6
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x45e715
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e50d
push 0x9cf
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e52a
push 0x9cf
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push getpeername
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x45e547
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 6
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x45e57c
mov eax, 0x53034a
push eax
push 2
mov ebx, 0x482300
call fcn.00481caa
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x45e5a2
push ebx
call fcn.00481cb6
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x45e5b5
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x45e5db
push ebx
call fcn.00481cb6
add esp, 4
push str.common
push dword [ebp - 0x14]
call fcn.0040147d
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x45e609
push ebx
call fcn.00481cb6
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x45e61d
mov eax, 4
jmp 0x45e622
mov eax, 3
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 4]
call fcn.00401753
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x45e64c
push 0xa6c
push 0x4050f0a
push 4
call fcn.00481cbc
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x45e669
push 0xa6c
push 0x4050f0a
push 1
call fcn.00481cbc
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x45e686
mov eax, 0x53034a
push eax
push 1
mov ebx, 0x4826a0
call fcn.00481caa
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov ecx, 2
call fcn.00401805
add esp, 8
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x45e6c4
push ebx
call fcn.00481cb6
add esp, 4
push 0
push 0
push 0
push getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x45e6dd
mov eax, 0x53034a
push eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 3
mov ebx, 0x483c30
call fcn.00481caa
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x45e70d
push ebx
call fcn.00481cb6
add esp, 4
mov eax, dword [ebp - 0x2c]
jmp 0x45e715
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x45e734
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x45e730
imul eax, dword [ebx]
jmp 0x45e725
mov ecx, eax
test ecx, ecx
je 0x45e753
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x45e74c
push ebx
push eax
call fcn.00481cb6
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x45e73a
call fcn.00481cb6
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 8