Function at 0x4397c0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x545987
mov eax, dword fs:[0]
push eax
mov eax, 0x1cf8
call fcn.00474db0
mov eax, dword [0x673114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x53
lea edi, [ebp - 0x604]
mov esi, str.lmosug6H1uWLNAzR8Du2LIh0VApNf4GTZkcti7mIrwXTvRqZFF89Qndli0mYx65u1gjtozYod7vvgCCJ1tMWaXmtpheGXu3K8aRQ0tjbMTL2ltbny0dZuBzIAFUOAk5PmoGwY5UaEVfcksszcqrqvAoOxPWEwfjrzDNvhijvIbShUcqJ30TkSSxr3x1KIIcKttRKLADsvtJdHeIco9q1iDsFHlShawttWseJeNGiLT8usfgIE1ljDaseI1u2YDhBaz5InVEtXtkLBVXizuQA013lnFu1iWV3VBFMmXTPYb08onegSVIlC2SEcEOaDdXTmiJbf3lIqkBVf
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x32
movsw word es:[edi], word [esi]
mov esi, str.S5SYEUB3UhzApTiGKO6LLppaWKmPAheEamEpNFQAjNWDQJKmdz3BUEtiBIfhh0GwEcz5cUua56ei0R0ymUwob6JHJzsz3wpLoiSkVfEbaz9jQVNP2wufgmUDSQsTJhNNvKvzDNwVGrWkWBZvgUmrCQ3ebBHcNxr8pNFhFzPh36YJnejW7wNbCztLNIQ607FhhQpyXQzVID
lea edi, [ebp - 0xdc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x34
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ewQAsQILyRG2axXIp3vDsyn25gYPB3zSMrfzo7vFd4apTv0UHJBP91tm37asvATJj1tGt39InlRZAKdNQTcvPQfIdZIirMMcylBJVTKKJXGUIR9hGdEmarGB8CxywHi5F1P1OXgQ1v7hhj9p6kRE83i32H8jo9RphUFyKs8160LJBn0zWf1bbreynlfnLEijFXOS3pMS6EXdGx5zSS
lea edi, [ebp - 0x27c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x41
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Mnbv4Dcdw0aFgtvrTqF87pMJEUVW2q2rVlOCH6mhLXu79438HX97hSNNYi9GbnGWQXv27ycnJQ2JAmPPcgRUJxymKUCGLRD3jH4UmeWkzjOqutESNTYdTm7ax3c21c4j2Bo6jXkDXC9qmy96hu1UrPUVHNmDhxveACt8JVb3XSryQIbc1mCf4JNcDYqodO5Qh6dBPMoo9jMvjltcalkfUEbBkmXVyfnvffGrpsIYoZDAo0r0W5KvPEHCHLE4vzFfJzmQkj
lea edi, [ebp - 0x384]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4b
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.nYFXcEDhHNRyZgaDjhWGe5RGxSyyG1lp5ULM0ejQLSh4LxNRacPgnxK9h1uFF2b7IXR7qLskEvZdMsTuqh0PTyUbP7LEavTpvVxBQpYksTXUzTawLbt1Xa2ZefEr3EtCkJvtxaxWQiSnFoYFhjPY7QtJgtcOiP54pG8jjVrk4GMNRLmGwHGzfzN4DG3Ka2cWylcMMwBNecywn1Hm7gsafbJ1bdjuv0qlWq1penDuoZVRD3FR89MctbyQWapsd7DssCsmuIS4wA8oX1EM98dNI5GGhSYxkGW9lO5eQ3M4DiJo
lea edi, [ebp - 0x4b4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x32
movsb byte es:[edi], byte [esi]
mov esi, str.U36dAnQkkMSWoPkIFRlToOMCLMg9lkviDIwOweLhNDdVBLVEJwpXuTJ0uy770YRlXhEeDUfGeNENkvfUcTMkXeYaKQAygxUpIaLnoEx30ovCDX7oMS15LG9PMSgviuoMXsI3MnMBcPn6HQ8h9mUo4PyXc5QyKcOMfTPcP5Kla4P1dBFFohIoFFFbMVWtNGmO1pjbyumOMd
lea edi, [ebp - 0x1a8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.bHD8CKHMB3dXpesSi248TeON9r5PYWGwXzWWmGlktnxsSANTAyYduAMoDxAxyVzBNBJ0V3VDVgnjj7x95YEltAMXXLDkhA5xXnQ9IJdI1CRZ1d6Bl5YmVbGGqb0b6pZrCvODyNRE7Q7LOOwhl6mMkh5iSPsGD1dZ0jfHgMlyLv2lUyO5fBvD5LNSMzJ341PWZB1WKiwqTkiebwu4jBHpkz9IgmVpD4tRyxECXog4Iz3VN9GdLsQhbRwdeqD7lKbiKsAbjs11wNgOm4elZF3mQnjlCyvK2m74LaoDowip2mxE3DIFedgeBuSIWf7T4jJKYCUOvQLnOMYk21FNzUBIBZl0fdpmVoKtrpYOux8rlxf5tslWWle1mXSW7slsv7NoBPlI7uJ9WEUYfeAyad9s6ChTq4XKbLlPGRnSKCgKGiwFOWtfgQfUv3QAgSCNfnufMUsfBuITPKXn8
lea edi, [ebp - 0x1738]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
movsw word es:[edi], word [esi]
mov esi, str.O7AFt5qF4EclwoJ9JXtFakftLR7VxBpiXT6I4qF5gGUuPZAVYpLR3nqrByAl7fKM8H9R6QOVj2z66FOYCUPmIrKExqWOpznYjqNScPssDOLdXxbW1B1tJZWRH8pR3p6H3qi0YWMpHvDaONyrJB5jM5SOn1s4pl4rCki082kElZUCfWwUiL2C9KCph7tQdpsr4q45LoGTtUSTtJugELIFN7oHPxKx6tSRgic2vocD6rRm4QGwwihdMv6JY9mRY2Z6gJ2MYl1se3MkSWVnqDdru9FlqENtDykLe0IZ3cI2rUXK23G3EKKeur7qllXS0jjP
lea edi, [ebp - 0xc70]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x59
movsb byte es:[edi], byte [esi]
mov esi, str.82KpU3CwjQFQPJDqURWAuaTIc8Zj46ddAr4kioW15QdoiD4dGSUWXRDBoCyGBbtdIRXJCsAqlutzMVdpjHvzVAOCio9Zd6IiD7sPyFabfFg4rjb0sZjextxnHY7igahIire48pCIUg2ecukPyGPyhSLkMMjuVRvVO1DIbMELnzM5CnGelqSllpzZFFX5NhYsWtulH5tyQfAD1dtbdF3wEvlXp1aJnS7FkLCN3WawmuS0KtwubdLfEEZxPOAh0kDqOCInz97gSa6vmrVVqDaRp4TaX2W1DoSKNkxvnXJ8nI3YIsBQNPniwuwGGwRX2aXbfHJDMYf0uOg96wOsnTfaKouIN0JDf2rB3JhZ
lea edi, [ebp - 0x1060]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7a
movsb byte es:[edi], byte [esi]
mov esi, str.uu493ApxePoys8Jtk4hWCr9X5xcxY6DWb80BJezuKyl1AfO6RbdsasU8rC6VhRzC54dLB430zpt6FJm8AotDMXKAK8sU95ETqR5thyHUEM3yDNQeNqiLxN7bYAcNv6b2hIYgTwn4cGfS84VW7yywHgCpahdpfwI8T8c8y1yQRWqwBSlFlNVoiCHTUyXrIU3sh1FZRqZ3ByYaoU5kHPAix8SV4ftN2806BMiHIprbgQnrRRVpavNwastpZ2CWoLN12oFjYqZjT0b8lfsrPTXQhNMsW7rT4p1QUD5SvBNd4VWJsjOOpYI5Z1m037d3tAA7Gzc3DBQBnw7tz2XaXPTg1i3hecINed0Dozc3J2yQkSOBDVyyL816hFTXvT05U5D3cuV5y69d13Pvlt0Soa7YXER6h5vxdBHYMhJNvKAbDeewvz3MLICHB5Vph8EQrWLqMntRkqp36GsyZNCiSNK38my6dBWocm9C9F9YmMYp
lea edi, [ebp - 0x1ce0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3a
movsb byte es:[edi], byte [esi]
mov esi, str.tpdZdxFCdOIb5pGhNZksgkpV8RsjrugL6pT0UIew7meqgSHQ1du5X87MotjDkb70jbRObKFbuyGn30820NuIiiiq8TnOySTtubc1XZVPo1apujvRQlPY7NZYTecV5iLsNrrNN5CS4cxcG5iJCnSYd6aoGnbkfwvqeyE48FvmdAszX2NiNJEMxrpEr1ONukIvnLQjQ7ANQ3VvOR3fvTYTTANT5GKkmqR1iJQa0ZRp
lea edi, [ebp - 0x7c0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x60
movsb byte es:[edi], byte [esi]
mov esi, str.ilxGm9VfwmBPFmSVd0di8miv6X5vVSNyjnyPxujcEZN7gGB5WsfpYiG7d4LVjSt4UOfWfJNdDgplrHC14V9ZjWoABBU92oFqQbZWqMzDYasfnJdMbGZFJYGjuPsCCdkafw2O0EsQ5oVogPPkwDWYErOL3ZfBXzEANs61TCv9qwVK637j0T3xzprgA1JYCFblkE5tbeWJ5Cga67RaWh0PhwtR02pi5ppq4o3P5TBz4NY9wcnjGOB2WWcv3TbzmvuVOdBIJ4kJ0ytJAyCgQBvTZ9Kwy9TBd2tCMoHqxSKtTy1FUZaxSw0HyxRTWnG2i62biDyO2wUFVR6WFFj4QQmgmv6oAnzJDKNG1rNvsYzCxjbY3IrJSuOVOeyxQInLP3Vj
lea edi, [ebp - 0x11e4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c
movsb byte es:[edi], byte [esi]
mov esi, str.Wxv5LUM38H042nfFzqVPWAQcfjm3teDW8k7BQecTdn00zZTPvQt7CKrcscjimeQMdCZkrJtDHyY7hPhIagkF93EaQ8a40XJf7JL33UlEbOE8DqzXuKs9o7UX2krcljNOTAfWVp50N0nnBYvS2jq3Xsgf5ZY9tVQynrByi8GRmoCuODV9IjlFvuWeQTTVfyBg9cfBjYrrTcaz3JzS5zS8XyPRpZF3hlNCGkiY89xsyyWdxWrcqCVGqwA2j0EwWKq1lCVQU7a1N8l7AqFHEMXtlOqhyFwGLcZ39I29qgvoxQxyosR9EOjtwaH0BXzZAlZKZHWTuVVthfBub9ud8EP4im4jgAuw6ZDuHYm33IkDqjW2uGsQ4TerIh0CrVMt6Cc0zV5TinR0eCILyDMurBJ3k8GE9xCAofWoB3frU8DUOkSZp3fV5
lea edi, [ebp - 0x1398]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x33
movsw word es:[edi], word [esi]
mov esi, str.1kZxaW3CC2RMU0ytFgOHRtobPftSyxI4rpSvFnvRVxYBTzpgOiCb0LmmXipNbvE5ufp7SPATNR6D1rFSb5P2KdHh3UkKKubRiODUVrnJUCAabr8ZRL27ileCEBxJ1QEH7mIVCluArWac9MxRaAoi94ii9zpKRBbWziikwQWWwAhDFnc21hfk9wK1lyytGInrfA5QteEGyYQw
lea edi, [ebp - 0x6d4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x49
movsb byte es:[edi], byte [esi]
mov esi, str.Y82DKKePMMrzuDRF31iAKFfRlVxuweR7fzcqvETQnpEHLUw5krQyUi8F78H3oJmjsvwBfdfTiQbPIJkc72x4XirwzLnf7kRrx8UrMIYB8Mk5s8H7lZAE1BklZB9g9qMhhxFWmeM4Jz7WNKedokhFAYpNEnPuQVzYcHpvng3LeC1qjwHRqzOmfFEa5x9ktyvsgFQuD7Xvwga7Npa4vA3f9J2tUcGu0c1lgVcHdFfonvAG9U68XtEbY5ThMvTghVVaoOfGjdbN6911bZ0vNGAEgJPj7nFCEpl7S9S
lea edi, [ebp - 0xa00]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x47
lea edi, [ebp - 0x8dc]
mov esi, str.tO516FPDhBwuXTjIvAjc7b38holb4gd22qcJkZYW6BwrITlPOfRK7jdOTPf00kOQIyuY0lBmYHMVIDmuifbVVosDsn7GNTWI1X7iS4eqyEXzULyUFYHufJBC2JOwdpycn6PagT1B9puq3u86hbv1rQSdEfOFgcyZOuvrMxHmidDua5r5LVOFxMsJqwHk5zoU34faYPw2vXg8y195DeuEbEojKf8QA7HmIonrnnSR0HmCMXm5JIySSrnuGqfd1SoJ9AL7yefgAOhzBjCIpmrWHUYRscs
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4a
mov dword [ebp - 0x1d04], 0
mov esi, str.2WXIrXBpQFik3hTWAgJigAnThj1kk2bYN1QE6h6xVHjO6CY5VNx8ugTiSVjQFtapDsBK0e2k4SSsOil3Nfpp5pf6Hv7sEc8M4kRbzgitjb6jzzkO0MBaKU21WThgqNt8SsOvrr4rzFBocgy1CnPeJg2o8YOjp7yC4APZpuh9lcLlkvJBeVAlueV0Nvd22VJBmP0EXpQdNcaQqxe3EQb6lw18j33msSFvec80kSS2WLipsoWzsuM0MZQt0JD4pxHbc2EQeexxuwBLgevTAtZByufpotHwsUWscq1yYtZ4
mov dword [ebp - 0x1d00], 0
lea edi, [ebp - 0xb2c]
mov dword [ebp - 0x1cfc], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
movsb byte es:[edi], byte [esi]
mov esi, str.wC5TFZER5e2yOID8XWRovbDXiWJ718akfJPXAubyYKY4g9MYDVQF9KhyppnaH4YUQgSWFyaibEuuubEGCGnPUcc2gqpGil9u0uxfCTz5K71kbusWGORpxzYFd1ljqE6lknFWmrtT0cVgEqnH267diwcjNfjwSJZZuDopXPUMkjf4Hnlnr5oPFh4lXXBYjSyKvg3adOs8Ij4q7ZlCRI0ahCQQGJrBQwpSwn7KQcddPWX9rl3P3XGiDaylRX029NjFYgcrMqg0stqBf9JiEr39MwI6CMfUtb2GprvBs6CgvMzMsNl1tD4xvQVIEG84jaB74nq60AAJ5bmhm6B41PkOMhfKEX4D3JFMonXKEMhVFOOkybf50ephi0jxixwT8wdkRXazriNjKtmPFFPaR7qCmDIBHuJLx3Ur9vN4k5r517Eim7hc1Ni5o1EH6rDcHmIbqFAzAZw5C2IV
lea edi, [ebp - 0x1568]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
movsb byte es:[edi], byte [esi]
mov esi, str.qOWq17YhjC2V67k5v7GxWpPEsGyiWmwAcYfpJwONoBY59Mg7paQxx6yNc4UitR2JUUBf44ZsKVCzVPHSOTquIzYTEvSCC3EPhNPnT6HCJD1K0Lgfbe8JLJPZwq1PjIVdMyZYmpLZVI0piQwCANpv1eP8wQRYQTXWvX2YaVZJuhufjhtI6QXFmskUfxsYk4N1xgwuzrPKqNhCqFUOAs9XejIKCx9WfVyQ9sLF7WliQ6wppOY3jFUuZeyXyuY2RnMK9WfpEitMUHgT2pXSVNfvYkCuiFivo92sOMMNnU6eaD5CVyYyqrx7lRWbd0Zu0b0VvUvgfZAFdl8Laa43Kbw2gSFTb6LKKSLWOamvjeVatF2t4xa3Xj7Ji4NXdlef8F0BRoLdBqMru6Vtlwt7jN3rQOXMxQ0g2f94JSEckHe3cP1DpTRsJBGUw39PyRw0SqIo8XU3RMSjy2BstUvLtA
lea edi, [ebp - 0x190c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ASdbSOS6NwF7NA6HvRYtjCjJjrhIhncltw3RwO5EBHdGwslvmbnQ8DkJZLxEHM5DiT4tUPiccsER38NZrHEvP6VIBesuZKqPs85sipaCQN17YKXtlOSlVE061F47S9BXLfVWvlHbX1ypaa2d994V5HAPaO4KvP2RmsqjID3eoPLeugAp4Cf6RxDZHSdHM5LxEskMMX5SxD0E9jmBumN2U8qiQ86va1OH6HoNieuLTlemsrDpS6PgpqINoqkt6HEAzbs8WKbzguGYNm4KpJe0PQPUCjNAdMbGTALNdvfjV0LNyPjnJkgbAQayJuY3AJFfavNjALhg2BTpLQXfj5QRhucDe86Qb6Zw0c0GfQR8ygN10rHoe57Sx71aBd6ArW1h7dfWPwN3GNEETMBFtQcggV2KoPHqjuv40T51X4x3Ujh5KpTAVJmLAY6dBix6uwVTI57b6dgtApZ4OrQ84CtARE43DW5jY43uTDcnP
lea edi, [ebp - 0x1af4]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x604], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x4399c9
xor ecx, ecx
jmp 0x4399db
lea ecx, [ebp - 0x604]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4399d2
sub ecx, edx
push ecx
lea eax, [ebp - 0x604]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439a26
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
cmp byte [ebp - 0xdc], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x439a4e
xor ecx, ecx
jmp 0x439a60
lea ecx, [ebp - 0xdc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439a57
sub ecx, edx
push ecx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439aab
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
cmp byte [ebp - 0x27c], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x439ad3
xor ecx, ecx
jmp 0x439ae9
lea ecx, [ebp - 0x27c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439ae0
sub ecx, edx
push ecx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439b34
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
cmp byte [ebp - 0x384], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x439b5c
xor ecx, ecx
jmp 0x439b6e
lea ecx, [ebp - 0x384]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439b65
sub ecx, edx
push ecx
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439bb9
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
cmp byte [ebp - 0x4b4], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x439be1
xor ecx, ecx
jmp 0x439bf9
lea ecx, [ebp - 0x4b4]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439bf0
sub ecx, edx
push ecx
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439c44
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
cmp byte [ebp - 0x1a8], 0
mov dword [ebp - 0x1ce4], 0xf
mov dword [ebp - 0x1ce8], 0
mov byte [ebp - 0x1cf8], 0
jne 0x439c6c
xor ecx, ecx
jmp 0x439c7e
lea ecx, [ebp - 0x1a8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439c75
sub ecx, edx
push ecx
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.00407d30
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439cc9
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x1738]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439d13
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0xc70]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439d5d
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x1060]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439da7
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x1ce0]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439df1
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x7c0]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439e3b
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x11e4]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439e85
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x1398]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439ecf
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x6d4]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439f19
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0xa00]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
mov eax, dword [ebp - 0x1ce4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x439f63
inc eax
lea ecx, [ebp - 0x1cf8]
push eax
push dword [ebp - 0x1cf8]
call fcn.00407e30
lea eax, [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
lea ecx, [ebp - 0x1cf8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xb2c]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
lea ecx, [ebp - 0x1cf8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x1568]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
lea ecx, [ebp - 0x1cf8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x190c]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
lea ecx, [ebp - 0x1cf8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x1af4]
push eax
lea ecx, [ebp - 0x1cf8]
call fcn.004057d0
lea eax, [ebp - 0x1cf8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1d04]
call fcn.00407f90
lea ecx, [ebp - 0x1cf8]
mov byte [ebp - 4], 0
call fcn.00405930
call fcn.00430070
mov ecx, eax
call fcn.004176d0
test eax, eax
je 0x43a158
xor ecx, ecx
mov dword [ebp - 0x1ce4], 7
push 0xffffffffffffffff
push ecx
add eax, 0xd8
mov word [ebp - 0x1cf8], cx
push eax
lea ecx, [ebp - 0x1cf8]
mov dword [ebp - 0x1ce8], 0
call fcn.00402880
push 0x288
lea eax, [ebp - 0xef8]
push 0
push eax
call fcn.004f14e0
add esp, 0xc
xor ecx, ecx
movzx eax, word [ecx + str._e__select_]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0xefa], ax
test ax, ax
jne 0x43a0d3
cmp dword [ebp - 0x1ce4], 8
lea eax, [ebp - 0x1cf8]
cmovae eax, dword [ebp - 0x1cf8]
mov esi, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x43a100
lea edi, [ebp - 0xef8]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x43a116
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
mov ecx, eax
lea eax, [ebp - 0xef8]
push eax
push str.explorer
and ecx, 3
push str.open
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1cf8]
call fcn.004024b0
mov eax, dword [ebx + 0x524]
xor ecx, ecx
mov esi, dword [ebx + 0x520]
mov edi, eax
sub edi, esi
xor ebx, ebx
add edi, 3
shr edi, 2
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x43a193
nop dword [eax + eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x43a18b
mov eax, dword [ecx]
call dword [eax + 8]
inc ebx
add esi, 4
cmp ebx, edi
jne 0x43a180
lea ecx, [ebp - 0x1d04]
call fcn.00405970
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474d9e
mov esp, ebp
pop ebp
ret