Function at 0x418ec0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5337f7
mov eax, dword fs:[0]
push eax
mov eax, 0x1cd4
call fcn.004682f0
mov eax, dword [0x657114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x79
lea edi, [ebp - 0xeb8]
mov esi, str.qhsx3zoUstyB4ishtUWwViqoSxyDduWnr4rPhgZI2PzHylBmWizR19NphrVCJLFFxGC2bHQEyo1uqmEEwbhEdQ3hca91Iti1zl2C3MmB4CPTAWKcf7gljlnWyQYvBSKxrHIplto4PEnmID8iliHK9EctD5UAZsiON7ZNdvb3UhC7NjMqtPRcxZEaYmVz12JntthJJSSLPj995ZMfjAZV1pz3rBWmSELsa1X9IxJomhzorRrNvDR3LwLMxUOgmuAII5kJAnFhlISCCljkxEidOOyT4GfYczkqz5wq3p70QAaxgrSYp8pVuSnZ7NKepII3xc5QoYU2TaWfSoMDG59D6VeMPHYETlq7uAB3pe9SnP9S5UZRmZjrJH5i7mcRfPJ6gNoZG4KZ86efoPqdRUDt18XUW4aBKsqANuERtfV5XRwiM4fKCWtzbiQCeuTAn11LOj478V1wtzqhlJ3bxS80aO70O8qjltDrwwQ7
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6f
movsb byte es:[edi], byte [esi]
mov esi, str.hk2CZ8LEz7OWGajJRZaJCfEYdTHjD0hLSbyXwHigxdSsrSYo9gEBQRXpQqbCGFXDjEdhfG8p46CanwPizHnfXdxlL3ZaaRWPCp3Ul3Q2fxaM001wJZt0RuRfEo6KnqsnlxTteJ6criTr6ZZKQ5UNMPdo8mEaveMRA1V96ydVU2e0yuCgy4D3r2AaQItV9VUdLi0BaiwUU0X8244eLaIkYmd3yKfURMcPWnScewEyC3EJlGvr4zH5VgQCrjsdlp4IW6pWgwHqUY8G2Qjs7NoJey69rmlky7Gil6hIandBcbNKRTG3xlLc3I8imlhsPzpxdYtRp3iwe7LBrgNxJb57yf1Iq7p9qvJzNfHwHeOzB1x86YWrhMIxmU4Qgz5HwBS3ts5U2fqDL7Zcq6fe1pQN6Oyz3SaLVrWkRpIHe4YhGEQwke7mBfKqUR9BmpAK
lea edi, [ebp - 0xcd0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5c
movsb byte es:[edi], byte [esi]
mov esi, str.ANVp0gp7HqVgy7bNLqirsk67u9s8v1bPucYDkByoRw2fjD5RioTufw2ftPePNeXz6TE2LbjHWAfYLK3gyHOmreNGw0XK9RQFPcJuGioTUx9LPuCInJIL2q5Cg90IN6RzWItDBYmefQbFq3U2VbJo1R90QPalIdD8bFtgqwtXfFFGTBC3RrVgfnzrJwNoPQJdX3TnQUMpLBYcV3vDOFTXZ63O8Om2VSSPPENQwK6jRNDbbNuGMwxFOQ7grR4cRxzBnFQRjHzxpjIFlno7TzoUYkSXrHIpxsQF6Sd7aJTputoVNzhC9dW34O3I3KbpCZTJf9WQD0dtxqaXS0ExwPtxXMLBiV777Bbf1JisyWHnRsNHmfkw
lea edi, [ebp - 0x2a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x67
movsb byte es:[edi], byte [esi]
mov esi, str.Gs0HnkxOo9ZynDjffAxn8STR99pbLaqWfmWjJRc0vwz1e6oTBcXGwP06vJHyKO3lQMW4EpItHbCj2yAu4BnGMpgE1EoWUDN5P9U30ynygaRunqXvdLvgV6D6XHHyGYnDNBGRjEvQQWnT5S0eoM9fDeuZ9PXcl1GgfvhcUQx8LI6sMiVGF0e1wYxr6oaacKI1jMJZbgDlDI7waAgGQkqMS2gtCv1SV59aZyZVIDZBv0wo4M1BPR1YJKDaNyGKXeF4phkuupQrTgtrCZSw7oya7ReHZUzLaHPI8CHBJPcD7o7swR0RWq8xt4aCcPJGH7I3hBq3laCKkMM1BQnlAhZhtPUKUn4lg0oQ7ttxutVTgZopnBtrtYCxrvFqK9A752rt9OA0u7MMvnxTwrLp9WCekfdDxc8t
lea edi, [ebp - 0x844]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x61
movsb byte es:[edi], byte [esi]
mov esi, str.OEgp5ZeCEBO3yntG7lstRh7Y4nu28cglGy5QdNqcvKKzER6DU17zOKIFSFTVa0btCQLuzkZQD5MbgDl8jNdTCQgHkN1TrguOep6YNOxDkeLOaToZMTvoUYObl83G9EqzAZ5i5m9RJiIt3Wo4J4RiflvfxcNhReGLRM8zZtgqjdMTRajMwSexRv1VNh8WqVI4lku6QXF8vBskvV73wtnhtBbCrWjYnrb3lWqeiAoxFrezipOLBAWVz8cfxQB6ImOYSzxZaQCkKxP9JQSa8Jc5kCw6Pn3nkhiIwe2jdSk1dtg7tBhygINXoCVLHmPNQoQ982UwYpHq3lctO4GWTbrkyBfiBu2a0LeLJ4VvopOeHjFtNp2bEKe1mAjor1RAQ05Q1o9k
lea edi, [ebp - 0x42c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x48
movsb byte es:[edi], byte [esi]
mov esi, str.gPntkSbnpPu0UNugNwmR1K5VQEQj12PSytJqG2It2KhGhTdLw2mQ0sYRVQoS79iAeDgOLZSbVItrtNM2L2MecWd0PbUVOWbjHDcwV7xw7Uw9ZoAaUVtcAdKRRMWynC9UyeOSWO7HlsSkpGmXPsvrCi9KIzX8OoiggtQKpatc7FkN9KzunFG10FoRarwLZYsrff4a7XJR9OWo7B2wGBetcJA4L5nDEJVqdbXOIApUygsuTjdUu7imojYXZYaECaayrpNPTbH57m1NE51N8EMaV3OOVOHjHId
lea edi, [ebp - 0x130]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4d
lea edi, [ebp - 0x120c]
mov esi, str.1UzFrpFe8kY3U8qpUkMgxMxQwhPBn3aLFvcoUfeE65VdnyMjsunj2Neg4SnjLcAaVkt1zfMxDU0AuZ7gaHU67Hb2v39kNmtxD0zMscxk0vVnhBmos3H4K9wp6Z1k5fR2AwdJcLS1FP79UxC2lgGX7fqahWAQJDeNqTiQgMxXSLBpBTUHrOJEsV14YBEnZym7JzQFvazK5ghLcUQgmzNz6Lfp94hrJtG0pPpB3eLs2nfZQEHuhR3alciUfxQDgdEpKDF6GDAyuqUBv3fxwjpVyilamWtZFQ01JZOI2oczLLOwDHCU5frPOu
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x77
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.C4MaH5ph2v7moByVwHg9UtkjIzOSNc673xeb7eNtyOeCAU97sX43Y7Rz1KpsLcpbZjDcEp5zVvtiKD9NVnTaLNq7cpc1EA52hLUWyILs19LemQzfVyQpfZZnOx8pkZ884lBPPAI3dYdNaDFjp7NKvrLWG80DXxcfeYBH3XyWukXX3LE5YPRrizelF43Hrd1TaQpKfiLhbcA2pmBD4QGjTNg5ZY5vhqs8L6D30gVYKwjz8slwougitteVfgpma1R3oJAanm5WVGsb76m0SLh00ARY4wqJbWEHWipfEQ2HGYEokY0IzwRFwZdbQ7wEHvoL5xfXno7x2pqtD2O2KNsULUZwqyB96Wyt4GLacoqQ4P9gSCVVFolbE1YvjzvkhltIuZr0Luqm2CGzVq9weVxzvrBlwK5wngQzv2GNq4gnNvZDi5F6uoSfZYMSuvezR4mk8t9be9Qo8gRjuV48zMJgeMK8yis6
lea edi, [ebp - 0x1cbc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x68
movsb byte es:[edi], byte [esi]
mov esi, str.jN4aTDYxUBO67tQYeJCrn5OttO9O1W8qdOhz0OTTI3cTuxSMLCxDtXymjIiSJxJn7OqiAZbJNCIQtQWLcQWonxJtJ1J52ateBBQ1KNydKIyuHBqcNG3Ph4da7UKcJZw9FQv4GQdNR1qQW5AK6IHCnRFFDzBol9U4yKNxQ0mGnpFBY5yCdpnyrpjguoOC9l8WbkGsqLbNYxBtDHZaaxeNvJsCcOW96QYUulAkjrisIg7eTzYjM0NFS5RSvrJZYCIzd58y5U4sVwYVx9QSiqa3a8kzNA4r8asF35aj25zaxk1sUzb3PulsrF8TwDD0R7aWGeqF3UGlV7wciS2HD9UZ4sAMJLd2fh16nWATJyOvTEkvYinHdScN4esGqhvMLg5yWzQTcnrxBtFNTpE4WcvEc8Bx98AJEcbO
lea edi, [ebp - 0x1928]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x43
movsb byte es:[edi], byte [esi]
mov esi, str.TJ1EOH6jyONf2AJoEkVVya6LlCq9iLMbAqL1pzQKlrmsHx6EOoyouceoIyue1l8MPFrYuyq0gsBXdfG1Fd2NLxgeWnyN5j64tbSwn8b5BtBAXEwrRPfXcnxhG6umtHfgNPFFBsiHiiShHmuWHE9xUQvFasQLaAGPOXU1BWeE54TYuaD9tqD2v8TfVAKmBURlrjYFCtDDfdnIrEzQ3XW4z9MnAWWMwBWl6EY5yBuOKdjr1oGdP4sURCqhgQLVCrRW8eHViCsOvhM
lea edi, [ebp - 0xfc4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x34
lea edi, [ebp - 0x5cc]
mov esi, str.TB1vMHwB4fgIi9qHu5QgGRBfiMR7sdGTbtQgLqFjk2juG5hfFBjjcZtz4323yxu7eSzwrQIfvKLt5QvXlbTPXD6mcgqwRJTn5umvhli8bV35eEX1lvciOLhL9pz4jvbymbxrTDlhMRl4ReCv6RlXi3TFK6X0UKlVa6DJOktJgzyfPctZqGfYOsACckJODqe8o3fntax6vQ76Z0s
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x38
lea edi, [ebp - 0x928]
mov esi, str.NcUps431adZC8yUEvmqlfkXjIiRnquI6XzZEPlNq4bs0s9UR4sS54aDhs2hyPMURHAvDWlaknzLjcrxbZ5sYB8haVksImjAIA0sNt03FIgSt9fwOhZJ4HjBH0TtkaT9Z2KjCnKBPW5KAEHzNpGe7IjmlaFwJGjugM6r2V2n0NkkD1kVj1MaCWwCU2qwD3d8ph1NzCBicmUkplo4aaky5b0WGmKMRZa6om1
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x33
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.mZCqw88lSV5CDrAaILBTsBoxfTPuIDciKYriuT28kjPuP5iGVzAR48UJvmFJGRG6ownxsvjeZGS9MJr7KyfToszdiKqsjhzhnqGRuE7c67NjsDJsMMmalusWkkGnxAQ2FGLvWONrWGKygqKmpqeUBgCyjjH95oGQqHukRrZJNwh4u1wuTKj6Et53xGtdtsAlc2kHSk9zBHxY
lea edi, [ebp - 0x4fc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3b
movsb byte es:[edi], byte [esi]
mov esi, str.GRTdIDbizFOCqkUfLki5kYScZbfxfmSeowPBVm4RHtvZTpjulp0ct9wlqta7IYNxEZjvmQcIfNTWIYXg4Pd7ibcYYMdX4ZFPZoY1H6DFyz8d2lAjQvwdO8uynsAfb7vm0AKnygWik5tRN5Cra3KYrcCWTxj0AlNDx1glvMGcU1n0L6skDq975rHQr1bqE330jxPuaVETwF8Se2eLp7kf9iRnI1YHxpxJ1Si57LStnxfV
lea edi, [ebp - 0xa18]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c
movsb byte es:[edi], byte [esi]
mov esi, str.xg0FHmhylY7W7NiGG9gruQ126RWyvOlrMUvcmMJ925ZGnD0EvdL4KNg2EEYKTT7I98dvCHTC1qldIgB4n3LFu65UCreF4mdvzhs85VvMgZ5I455cvP2y0Azl6o0Q3dnzyTYcZjJPmc97jR4Hek85nDQkMHSdmqSiWUmkWcTRUPDrr2DeMc5h5GXJCYnjjQ2yWl13fxQkazvTS7b8WYv8UqtKIxpoV6lffqB3XbzBrkMj7bMYNZVnAzCcZVWqCosqEBHp7AZuGGkWsVmwQ5YiBtCrZIE5GFgOFICuDUYXX6dFBgqJx5cGovaZgTvVZUPCXvY2G4P303zZd2KzFu26yTSLHlwqy6MIddz5YY8BGQ9Vd2UVTft3cocgmUxxP5G3M6RPMmBuRuGBfXI5lgjuAI9ifFkjPwPlOQqjSjL5p7tWHDJReo
lea edi, [ebp - 0x1adc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3d
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ZdKn4Unlc3ei9lz7uhEEfzGFdnnTt9Yy5Vjmtd0yxzmW6JKoSGJ843SopQESKzzUfCeAklN0Z4ROXoILignvhYWWaNx7tbKFja29tcrQNHpjrIMAbt71JnvGVU1SRxmYYmba1IyAV1RDzSIXqrOxGrhZl94JnaXa9M47XmoUAJEvX2yT7sMtJKlh47F08O4brsAcZsqcjjMOFIyWF6aXxiEbTzyLIETN5VLX4uOe3p6iJ7kot754Jy
lea edi, [ebp - 0xb10]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x43
mov dword [ebp - 0x1ce0], 0
mov esi, str.6TiuCH2ZbfbS5vzXQ7L7q1ndKDGiIvHO4LG5WP891g8OqfwTrBBj1AWOaEA5lCkjNsAvjXAChfwGk3yBhY6nC3Mh06udcllUjJgFrXaAJGFykJRvEXIfSQKGQtg7exFoicYWJA3O9q6hSE7pt6XpZ2Kl4ZZtrrjZPLkEVrXXcCygwP5PSsmyegCBZGpbH1nU4VPCpYeEA7emEXcwLaNdkX9aFgdXi0wzpePVCYpQTkWIeJ9h2ZObl2GUkfL9n56LaY422mk3HXtS
mov dword [ebp - 0x1cdc], 0
lea edi, [ebp - 0x10d4]
mov dword [ebp - 0x1cd8], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x35
movsb byte es:[edi], byte [esi]
mov esi, str.N1NhNKGKJT0XyQ59zUkggSvGyPTaRN9LB7J1RK5zx70kd1YOAIqFDG5XZoF9r4gser2qoUqsRBOLrPIis1up76rKLnJDLO5yCK8gA3mPJLlcKMs45YzcbwBHCfgkM8ydmxN61iOTcHwVjcncguZ4I1lQQSW3RuX2KKwwKDvhjPXhABlGByccDlFZbGRfvM5A8AP4FZtY3xPZ2JjKDHJC2
lea edi, [ebp - 0x6a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x65
movsw word es:[edi], word [esi]
mov esi, str.144jcaJxLfBE7IKxNcrw7KskWqResP8zfLhuYaxoiQkFW4kzWudzdYmPsj1k2dEdqrSnwmCsMWEqzyKkfXqr0EVJIDYO33oXzJas3M5Cfu87klrhhc7D9Sv11sPsFkZ7HCOiDoY7qBgaPCSt4SOKrCePwl5Ur3zi0zrrxY4JjDBnQHw8j3Yjp7kM4YJCbswj3QzLkfkDW96ZMw7SDOwY99FwH1DkltUw8Gda5RBuPR12v9S0Kcx5UujLIK8fFGM2CTZ8RQume2TjuUO0Lbibt4uiSOP6L9506hdIi350sO8ZENBer27EPvEHGDYFy0KkGxsMyWTLlPSA9poJl0fWkIGG3DKNgWOZdwRwrxtm1VlgSqSlyU7Fd7CQBmkt95Neotays8DQZKttmWKkcung
lea edi, [ebp - 0x1784]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
movsb byte es:[edi], byte [esi]
mov esi, str.SdP9MJ1GfmD0Y4N5vovjnkXKKEqVnCx8Co9KziZmfOg350ohlXanz8SDUlXeQUw3bpWQ0rmY9xo66wEzuZkDBbVyYOQLst4RZVU6XMAphcZ27htNotlh5sALCMYNURqDL5d7ZPfOnObT4M6fb9SquPN0ksAEoZm8u38tTHbJAUJGApX93WKcP3T5omKcj2WzeaRtCMhMQxVAzp2MhXcxhNYlnjR6MR6wgiU0vj3trgYorgC80a5APFzUWUvXFy9F1xurzoZXOpdVZQMSsgD73mlu5R04zwMjPyR398C4SSfZX1DlM4XG9dZ65L36BLpLB8FImhkVZEkThHYgHtE1FI9
lea edi, [ebp - 0x15ec]
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0xeb8], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x4190c2
xor ecx, ecx
jmp 0x4190d9
lea ecx, [ebp - 0xeb8]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4190d0
sub ecx, edx
push ecx
lea eax, [ebp - 0xeb8]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419124
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
cmp byte [ebp - 0xcd0], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x41914c
xor ecx, ecx
jmp 0x41915e
lea ecx, [ebp - 0xcd0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419155
sub ecx, edx
push ecx
lea eax, [ebp - 0xcd0]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4191a9
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
cmp byte [ebp - 0x2a4], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x4191d1
xor ecx, ecx
jmp 0x4191e9
lea ecx, [ebp - 0x2a4]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4191e0
sub ecx, edx
push ecx
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419234
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
cmp byte [ebp - 0x844], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x41925c
xor ecx, ecx
jmp 0x41926e
lea ecx, [ebp - 0x844]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419265
sub ecx, edx
push ecx
lea eax, [ebp - 0x844]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4192b9
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
cmp byte [ebp - 0x42c], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x4192e1
xor ecx, ecx
jmp 0x4192f9
lea ecx, [ebp - 0x42c]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4192f0
sub ecx, edx
push ecx
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419344
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
cmp byte [ebp - 0x130], 0
mov dword [ebp - 0x1cc0], 0xf
mov dword [ebp - 0x1cc4], 0
mov byte [ebp - 0x1cd4], 0
jne 0x41936c
xor ecx, ecx
jmp 0x41937e
lea ecx, [ebp - 0x130]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419375
sub ecx, edx
push ecx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00407bd0
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4193c9
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x120c]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419413
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x1cbc]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x41945d
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x1928]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4194a7
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0xfc4]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4194f1
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x41953b
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x928]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419585
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4195cf
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0xa18]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419619
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0x1adc]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
mov eax, dword [ebp - 0x1cc0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x419663
inc eax
lea ecx, [ebp - 0x1cd4]
push eax
push dword [ebp - 0x1cd4]
call fcn.00407cd0
lea eax, [ebp - 0xb10]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
lea ecx, [ebp - 0x1cd4]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x10d4]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
lea ecx, [ebp - 0x1cd4]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
lea ecx, [ebp - 0x1cd4]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1784]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
lea ecx, [ebp - 0x1cd4]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x15ec]
push eax
lea ecx, [ebp - 0x1cd4]
call fcn.00405820
lea eax, [ebp - 0x1cd4]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1ce0]
call fcn.00407e30
lea ecx, [ebp - 0x1cd4]
mov byte [ebp - 4], 0
call fcn.00405970
call fcn.00419fe0
mov ecx, eax
call fcn.0044c0b0
test eax, eax
je 0x419858
xor ecx, ecx
mov dword [ebp - 0x1cc0], 7
push 0xffffffffffffffff
push ecx
add eax, 0xd8
mov word [ebp - 0x1cd4], cx
push eax
lea ecx, [ebp - 0x1cd4]
mov dword [ebp - 0x1cc4], 0
call fcn.004028b0
push 0x288
lea eax, [ebp - 0x1494]
push 0
push eax
call fcn.004e37a0
add esp, 0xc
xor ecx, ecx
movzx eax, word [ecx + str._e__select_]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x1496], ax
test ax, ax
jne 0x4197d3
cmp dword [ebp - 0x1cc0], 8
lea eax, [ebp - 0x1cd4]
cmovae eax, dword [ebp - 0x1cd4]
mov esi, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x419800
lea edi, [ebp - 0x1494]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x419816
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
mov ecx, eax
lea eax, [ebp - 0x1494]
push eax
push str.explorer
and ecx, 3
push str.open
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1cd4]
call fcn.004024b0
mov eax, dword [ebx + 0x524]
xor ecx, ecx
mov esi, dword [ebx + 0x520]
mov edi, eax
sub edi, esi
xor ebx, ebx
add edi, 3
shr edi, 2
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x419893
nop dword [eax + eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x41988b
mov eax, dword [ecx]
call dword [eax + 8]
inc ebx
add esi, 4
cmp ebx, edi
jne 0x419880
lea ecx, [ebp - 0x1ce0]
call fcn.004059b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004682d0
mov esp, ebp
pop ebp
ret