Function at 0x4175b9
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push 8
call fcn.005dc81a
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x6b42b5
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 8], 0
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.AppData
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417629
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41766c
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Cache
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4176b4
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4176f7
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.CD_Burning
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41773f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417782
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Cookies
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4177ca
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41780d
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Desktop
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417855
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417898
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Favorites
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4178e0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417923
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Fonts
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41796b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4179ae
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.History
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4179f6
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417a39
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Local_AppData
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417a81
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417ac4
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Local_Settings
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417b0c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417b4f
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.My_Music
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417b97
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417bda
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.My_Pictures
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417c22
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417c65
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.My_Video
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417cad
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417cf0
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.NetHood
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417d38
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417d7b
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Personal
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417dc3
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417e06
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.PrintHood
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417e4e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417e91
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Programs
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417ed9
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417f1c
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Recent
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417f64
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x417fa7
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.SendTo
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x417fef
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418032
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Start_Menu
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41807a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4180bd
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Startup
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418105
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418148
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Templates
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418190
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4181d3
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Administrative_Tools
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41821b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41825e
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_AppData
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4182a6
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4182e9
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Desktop
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418331
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418374
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Documents
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4183bc
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4183ff
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Favorites
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418447
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41848a
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Programs
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4184d2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418515
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Start_Menu
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41855d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4185a0
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Startup
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4185e8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41862b
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Common_Templates
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418673
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4186b6
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.CommonMusic
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4186fe
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418741
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.CommonPictures
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418789
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4187cc
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.CommonVideo
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418814
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418857
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.Temp
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41889f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4188e2
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.WinDir
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41892a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x41896d
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.System32
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4189b5
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x4189f8
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.USERPROFILE
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418a40
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418a83
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.ALLUSERSPROFILE
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418acb
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418b0e
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.ProgramFiles
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418b56
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418b99
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.CommonProgramFiles
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418be1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418c24
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, str.SystemDrive
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418c6c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418caf
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.005dc814
add esp, 8
mov eax, 0x6b5f5e
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call fcn.00401a51
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x418cf7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.005dc838
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0xc]
push edi
test eax, eax
je 0x418d3a
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418d64
push 0x753
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x418d81
push 0x753
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x418d9e
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x6b5f5e
push dword [ebp - 0x10]
call fcn.00402bee
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x418de2
push ebx
call fcn.005dc820
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x418e09
push 0
mov ebx, 0x5dcf80
call fcn.005dc82c
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
jmp 0x419431
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418e30
push 0x7e6
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x418e4d
push 0x7e6
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x418e6a
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x418e93
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd2b0
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x418eb9
push ebx
call fcn.005dc820
add esp, 4
push 0x6b4435
push dword [ebp - 0x14]
call fcn.00402bee
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x418ee7
push ebx
call fcn.005dc820
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x418fa9
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418f18
push 0x834
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x418f35
push 0x834
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x418f52
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x418f7b
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd2b0
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x418fa1
push ebx
call fcn.005dc820
add esp, 4
mov eax, dword [ebp - 0x14]
jmp 0x419431
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x418fd0
push 0x87d
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x418fed
push 0x87d
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x41900a
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_connect
push 0
push str.System32
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
push dword [ebp - 0x10]
call fcn.00402bee
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41906e
push ebx
call fcn.005dc820
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41907e
push ebx
call fcn.005dc820
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x419184
push reloc.WS2_32.dll_connect
push 0
push str.ComSpec
push 1
mov ebx, 0x5dd2b0
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0xc], eax
push reloc.WS2_32.dll_connect
push 0
push str.ComSpec
push 1
mov ebx, 0x5dd2b0
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x6b575b
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4190fb
mov eax, 0x6b4435
push eax
push 4
mov ebx, 0x5dd570
call fcn.005dc82c
add esp, 0x34
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x419121
push ebx
call fcn.005dc820
add esp, 4
fild dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fsub qword [0x6b43f1]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
call fcn.004019f6
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x419156
mov eax, 0x6b4435
push eax
push 2
mov ebx, 0x5dd2d0
call fcn.005dc82c
add esp, 0x1c
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41917c
push ebx
call fcn.005dc820
add esp, 4
mov eax, dword [ebp - 0x28]
jmp 0x419431
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4191ab
push 0x9d6
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4191c8
push 0x9d6
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x4191e5
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x41921a
mov eax, 0x6b4435
push eax
push 2
mov ebx, 0x5dd2d0
call fcn.005dc82c
add esp, 0x1c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x419240
push ebx
call fcn.005dc820
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x419253
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x419279
push ebx
call fcn.005dc820
add esp, 4
push str.common
push dword [ebp - 0x18]
call fcn.00402bee
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4192a7
push ebx
call fcn.005dc820
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x4192bb
mov eax, 4
jmp 0x4192c0
mov eax, 3
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 4]
call fcn.00401a51
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x4192ea
push 0xa73
push 0x413a513
push 4
call fcn.005dc826
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x419307
push 0xa73
push 0x413a513
push 1
call fcn.005dc826
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x419324
mov eax, 0x6b4435
push eax
push 1
mov ebx, 0x5dd720
call fcn.005dc82c
add esp, 0x10
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov ecx, 2
call fcn.0040108c
add esp, 8
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x419362
push ebx
call fcn.005dc820
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x41937b
mov eax, 0x6b4435
push eax
push 0x80000301
push 0
push dword [ebp - 0x20]
push 3
mov ebx, 0x5e0750
call fcn.005dc82c
add esp, 0x28
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4193ab
push ebx
call fcn.005dc820
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4193bf
push ebx
call fcn.005dc820
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4193e1
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4193dd
imul eax, dword [ebx]
jmp 0x4193d2
mov ecx, eax
test ecx, ecx
je 0x419400
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4193f9
push ebx
push eax
call fcn.005dc820
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4193e7
call fcn.005dc820
add esp, 4
mov eax, 0x6b42b5
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x41942c
push eax
mov ebx, eax
call fcn.00401021
inc eax
push eax
call fcn.005dc81a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x419431
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x419450
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41944c
imul eax, dword [ebx]
jmp 0x419441
mov ecx, eax
test ecx, ecx
je 0x41946f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x419468
push ebx
push eax
call fcn.005dc820
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x419456
call fcn.005dc820
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x419487
push ebx
call fcn.005dc820
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4