Function at 0x10003ff6
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push 8
call fcn.1002ad16
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x100b5ac8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.AppData
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000406d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100040b0
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Cache
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100040f8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000413b
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.CD_Burning
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004183
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100041c6
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Cookies
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000420e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004251
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Desktop
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004299
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100042dc
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Favorites
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004324
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004367
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Fonts
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100043af
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100043f2
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.History
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000443a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000447d
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Local_AppData
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100044c5
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004508
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Local_Settings
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004550
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004593
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.My_Music
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100045db
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000461e
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.My_Pictures
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004666
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100046a9
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.My_Video
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100046f1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004734
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.NetHood
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000477c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100047bf
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Personal
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004807
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000484a
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.PrintHood
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004892
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100048d5
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Programs
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000491d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004960
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Recent
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100049a8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100049eb
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.SendTo
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004a33
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004a76
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Start_Menu
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004abe
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004b01
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Startup
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004b49
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004b8c
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Templates
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004bd4
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004c17
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Administrative_Tools
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004c5f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004ca2
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_AppData
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004cea
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004d2d
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Desktop
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004d75
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004db8
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Documents
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004e00
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004e43
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Favorites
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004e8b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004ece
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Programs
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004f16
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004f59
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Start_Menu
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10004fa1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10004fe4
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Startup
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000502c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000506f
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Common_Templates
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100050b7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100050fa
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.CommonMusic
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10005142
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10005185
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.CommonPictures
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100051cd
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10005210
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.CommonVideo
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10005258
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000529b
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.Temp
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100052e3
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10005326
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.WinDir
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000536e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100053b1
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.System32
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100053f9
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000543c
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.USERPROFILE
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10005484
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100054c7
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.ALLUSERSPROFILE
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000550f
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10005552
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.ProgramFiles
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000559a
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100055dd
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.CommonProgramFiles
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x10005625
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x10005668
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, str.SystemDrive
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100056b0
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x100056f3
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.1002ad0a
add esp, 8
mov eax, 0x100b6005
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
call fcn.10003fd6
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x1000573b
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.1002ad2e
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x1000577e
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x100057af
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x100b6005
push dword [ebp - 0x14]
call fcn.10001029
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100057f3
push ebx
call fcn.1002ad10
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x1000581a
push 0
mov ebx, 0x1002b260
call fcn.1002ad1c
add esp, 4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
jmp 0x10005d44
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x10005848
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10005871
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b2b0
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10005897
push ebx
call fcn.1002ad10
add esp, 4
push 0x100b5a7c
push dword [ebp - 0x18]
call fcn.10001029
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100058c5
push ebx
call fcn.1002ad10
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x10005954
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x100058fd
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10005926
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b2b0
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x1000594c
push ebx
call fcn.1002ad10
add esp, 4
mov eax, dword [ebp - 0x18]
jmp 0x10005d44
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x10005982
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push getpeername
push 0
push str.System32
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
push dword [ebp - 0x14]
call fcn.10001029
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x100059e6
push ebx
call fcn.1002ad10
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100059f6
push ebx
call fcn.1002ad10
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x10005afc
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x1002b2b0
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x10], eax
push getpeername
push 0
push str.ComSpec
push 1
mov ebx, 0x1002b2b0
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push closesocket
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push 0x100b5df1
push getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10005a73
mov eax, 0x100b5a7c
push eax
push 4
mov ebx, 0x1002b570
call fcn.1002ad1c
add esp, 0x34
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10005a99
push ebx
call fcn.1002ad10
add esp, 4
fild dword [ebp - 0x18]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fsub qword [0x100b601a]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.100021b7
push 0x80000301
push 0
push eax
push getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10005ace
mov eax, 0x100b5a7c
push eax
push 2
mov ebx, 0x1002b2d0
call fcn.1002ad1c
add esp, 0x1c
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10005af4
push ebx
call fcn.1002ad10
add esp, 4
mov eax, dword [ebp - 0x2c]
jmp 0x10005d44
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x10005b2a
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push 6
push getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10005b5f
mov eax, 0x100b5a7c
push eax
push 2
mov ebx, 0x1002b2d0
call fcn.1002ad1c
add esp, 0x1c
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10005b85
push ebx
call fcn.1002ad10
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10005b98
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10005bbe
push ebx
call fcn.1002ad10
add esp, 4
push 0x100b6022
push dword [ebp - 0x1c]
call fcn.10001029
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10005bec
push ebx
call fcn.1002ad10
add esp, 4
cmp dword [ebp - 0x20], 0
je 0x10005c02
mov dword [ebp - 8], 4
jmp 0x10005c09
mov dword [ebp - 8], 3
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp + 8]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x10005c37
mov eax, 0x100b5a7c
push eax
push 1
mov ebx, 0x1002b720
call fcn.1002ad1c
add esp, 0x10
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
mov ecx, 2
call fcn.100019f1
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10005c75
push ebx
call fcn.1002ad10
add esp, 4
push 0
push 0
push 0
push getpeername
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10005c8e
mov eax, 0x100b5a7c
push eax
push 0x80000301
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x1002d530
call fcn.1002ad1c
add esp, 0x28
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10005cbe
push ebx
call fcn.1002ad10
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005cd2
push ebx
call fcn.1002ad10
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10005cf4
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10005cf0
imul eax, dword [ebx]
jmp 0x10005ce5
mov ecx, eax
test ecx, ecx
je 0x10005d13
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10005d0c
push ebx
push eax
call fcn.1002ad10
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10005cfa
call fcn.1002ad10
add esp, 4
mov eax, 0x100b5ac8
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x10005d3f
push eax
mov ebx, eax
call fcn.10001986
inc eax
push eax
call fcn.1002ad16
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x10005d44
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10005d63
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10005d5f
imul eax, dword [ebx]
jmp 0x10005d54
mov ecx, eax
test ecx, ecx
je 0x10005d82
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10005d7b
push ebx
push eax
call fcn.1002ad10
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10005d69
call fcn.1002ad10
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005d9a
push ebx
call fcn.1002ad10
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4