Function at 0x5091f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a54d7
mov eax, dword fs:[0]
push eax
mov eax, 0x20a4
call fcn.006e6170
mov eax, dword [0x8cf144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x70
lea edi, [ebp - 0x174c]
mov esi, str.2pdqmnGGHmONzT6zIwRHghSydopwQWLRBNenKLnQ4sXztdGRCryGotkYvjiQFGTl0r35Zn3y7qnjMlB6C8vRj0eP3GJrc800xYoYnASYM8wTbd5TsiXDsrCajam0fXX3LDSCu1A6rSovxYc8ta2gmw5OWGpe5GnXezB0RPECJ3vHCL4eTZl2f8V9ITEbmpTO62P82tZdIFeWNCodk4JSzaGVHQ06c1JF1U6gLFSRWyvphzknqyvWt29bM5dsnBV8ZkgU8M9cAjqoXYAdjYh9ddGeNRNCdtHLnfomydZfQcc89PntuS0Rc0NLGLDVTqkKVUCZNwMcAelkFg7BdRzqecGHfIjjLn1ProgtzO5rA3nBD7KwVuURVz5d4L7NHjE2G61pIWMX11sPRrKB0Bs9f6ybq4ySmtDqimJBQqKxvQgh7BRU8w4lPrwoyhRXk7L4
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsb byte es:[edi], byte [esi]
mov esi, str.DsYiVklCbPem22I5qau766xNBqgbruUNIOZcKLSUoc5YujYL0qcJxS2rum8rPU98RKfoS1DNfi1p4MDvlNi5Rq2Agas60betvoPJGw90DaCEN7x5qFfaNCIOYi0vY30maK7xsuCVkA5yvML5pGkmsmH7xy0Umyn5sbwebBn5YRVIzmc9bt6vVGk9162vwPYnyObk2JJEZfiBe4goXsXg8x5DxOKZn38iipfJKbrn3X5d5EscAxOJS1ncYGoYBuAEkyWuqMD7UPDz3lBddEusEo5dd2bA6E7Dcf1TYnWppZleR6EUIHLB2dbxgJj1MFfD7r5GDSxT5TGIRHowgBqzn22e8MT5HjrZprq2k4o0KZWjIuL3izIPIVfbWrI3114JNXxnXZFXfEE
lea edi, [ebp - 0x13e4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x59
lea edi, [ebp - 0xcb4]
mov esi, str.kqzNi8952oHESBgt3XgrGtJxvscyturGchaw7H6fUyOC3L0f8JegMeTpTyBZvyVz813V8AEkEVVn7svOuhb62YO81LCoqXtsGve1UZYEPibR0KLqg1BRp9eakbIoo5Eb6hszyOr84gvQaAH85AhJWpQ41ePV6jKlffw6EkVzfCSE9bm7K2biguNDpGzaVNsGIN1U2xvLnIeWjeFiRytjA7jDphER9iMhIyrCr1Wd1Q6YwoZJFkfmayTftpZEj3GAkQrCfIhgAsZkYEO4FdHxexIYwowRW8o5zu4QQIbq3oTjgg3xsoPZbvXVT8gqFyMW93tX1iKhW5r3mqJGfk8Yy8ZcxafWE6DW2TEhB
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsw word es:[edi], word [esi]
mov esi, str.Xg2nGPt58SE4JU8ak8n5OEC2FdT5giQa5LY2jkCvP7Ko0xuh9gpOhveqIdDb6TtLec4xHTf8gZkjCtBotJ03mXdGZ6tPzcxJH5B4kcXQV9se4hKFqGNJ77QoV8oE8ry4tNuDpLf5mHRZVTN0PGYqRJ7vn4XIU4Lci6Ogrix0EbsLjqeqXFo81B1jgaitOjAtHumfS12fWvM7pqYA3f8GwGvsN1CZ0ANG66zZvh34R5QCiIbaGZ6ergB4ahgqH8df5KxapCPqwWqs5bP6id1qpvqSMwysJNHKqQCMfINLUCaxRCMIwdcJEMfscqPG6JlwfYZewMR9PPtfioQt39K35wXz05B3ppeIkALIGMzKhEBIZNWiPF6mTTRJVGWosltfBqtwAKbYyRduN4YDdUA2cKhVsxYxhxGGcrYQfA9GPeZGYSxWiSpLBIMsK27XuLuAkmfC5Cg4YNr0HxukPdkn9vXsTxRKyw4hZMQBT2hAqwAsdATN
lea edi, [ebp - 0x1d00]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x46
movsb byte es:[edi], byte [esi]
mov esi, str.Yeyioe1gmMt1eMWE9YLuX13hC0HG4ZneFifbKSXOu8cIlja46eSfmARW5ZnpAbo5q8lp44NI4zTNShahlUh9M4ku1VYzZRixF9sNWJA7L8iVLmoM5RY457SU5uwFxuEaQ2Eae0v19kV8cS5gUzPFUbr1yKN8y5hymBDEM76pT3LD3tYacEcjKaSFLM4B6nzTRy7oQBCe1jwNer38HSnWrD3TjdRzu1PhRbv7u5nYFr6K9Ky3TEZbU8uk1TUscyh8pHXKfFi6w3XZnc9gbdGLzCK
lea edi, [ebp - 0x500]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
lea edi, [ebp - 0x8c4]
mov esi, str.W7aqh20wpiJEb45yCZMn6u5NDOKTPiF4W8JgafwA7rO32HcEVoDBGcymbb38LmfpZjxrzSQyHPEVZhxOSRuoI3EbxymAydIkqSikfo6lKV57wM8lFfaUCCznOpZajkKWRCrmC4eveXBxF3Qqcd5WSl99AMkBjjshgGY3cbN632e4OtLOd7NP1dop9luraZDUL73CHSvFVPmSI29Nk8ott5vMUMLdCBiKu64Mg3DN2DAjtqSSB32PD4ERr6dc5YfQr17Q0bwaLL8S5oPkt8MaIndjUKS9x1Z9BNNLCFtDI9EzOOQsqCkdn08oR2arzSOHxj
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x46
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.73fHnp6bu0gpcwQYvUPEf8lAUDmMslnpf5avUV5NpwbLlUDNERZLb3Swr0zcJA2MovD5xkG49UyLMQ4Q1UCtZbuQ5DnWadjsUirbbSIzrhuRtSVelZ7lE7KbuYo4Hr7kWiLaZdqqS3EBgQteAecveSqLvCv6nnUBr07ce92YTr3vgTtJfwfXv6bK1ZM6jT7DxBgto5ZKWazEFnKyGzbRez2Kh7GB3sFyXWDTz5GPa5bXxGWNbpFPxajHgFBywJCkZcWyxUKJizIQBVqsaXWkf7pE
lea edi, [ebp - 0x3e8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5b
movsb byte es:[edi], byte [esi]
mov esi, str.hJSDdGF1Do5VsIiYy0h95570TF6CXFpCpDjpcKR3P0BrIaQMqYfRKBqQjsLEUOURrOe8PkvPILrgpBPeZZs5HcilY0DwG7oJFSNxT0bidKJ7GuNIwuEDNQLWQUx5pkT1iWMfe77UW1S9wuJIcMfyAjYyG9FSKKjzgx7uBtglKBaGXa7dPl0qkTD97YLgZYeh5gDybmGKO9Q5tQTZj2TZBBOlMRsBsmeIMpAhf2RkokuJzJ2BVoqkhNrpTDQYydMqJrglCVHkBavKBmMS5RoiVTGh8FyWJm60zTUOYLUTQc8JLd9eDK3uJcOPxrJ2YaWTBHee6HP5WLIEeX9WF4TTxITp6SzNE8Fge0i2rw67IjxJ
lea edi, [ebp - 0x10d8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x68
movsb byte es:[edi], byte [esi]
mov esi, str.pJ7pmYLTnVxcnhRzM7BjTltdWjw1Tx8Y1LTSQMnWYIMlY4RMbEPZbSU3WtnHae828ny9nhYOQjupMx2kgGcNBZHWXk1SFczSdojJkUxBJWPmZlW4d5rKxVpzWiOHrLDqnpZaYirXYJWYf68M9UzwKRpbX7JEeozGHo3DCA0EYfyKYeTID9ZklxfCrsv3T57tV7MI8kF50sW4zLlnkYayT21y9DosLOHFOKVZfl1Wq2sL1LTOLzBL9b1U8crZS0vAyQr5Ey8aXXgnSJkmeRnhdJrQHtj3o1N9BAJExhLDiTG6Y1jFqD2EfdHnsA5C1h0WdG24775E5Rr4t9XuOAeuzdkPOwfsTsXTnmUAyBD05V2L2MgFkiS1Gmza8p6zCPxgQta10v0uTnk24LhnDAGiMNAzivvCfSpf
lea edi, [ebp - 0x1588]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6b
movsb byte es:[edi], byte [esi]
mov esi, str.dbyyjE48XFRkOjSSmKb26BSNyOYwfbBOO5PzSwabRaUgVyeMoIsguTwKybEjQoEeeBukiJI6kUpXU6vqF88pqbIIXFodBTzWUuOMB1WaFTTCaQdgbvN4DMPXKmZYVamkOabo57gcowCKYWVXoL3UXmdATwPzaqOxC8ZZHaFxu6Eq9NZok08aHoY2UIYxFcI4trzkbrHRuAX8gpZPfnqEYPWVQ5DlaRmmoqjg1cG5eZZiyhh9kkSnnGPJaakHiE7WrMu8kc9CWjXqHSO1ZxqaZcMHiWJ78HfEsd3WraeqF7VJdmaU0CA53v9HvPWdDxCD7OqJW4paVAaD5YntYyU5Tk8Zi0BWbyqMhA9zZWKpAqq1KSIuPTtQxUIaCIVwsNTw1GJhQ5WqRkx7PEJ8d0L8Ec7RHSERUca0JNKxelFsSjr
lea edi, [ebp - 0x1eac]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3c
lea edi, [ebp - 0x1d4]
mov esi, str.se8YwKe3wcNxlTK6dlBO1rCyYW3et8kyJcZSuGHvFRzZ6XkalP4GMWAKKPDg2S75vKsXadsENYcWq3uN1HQBIpqr2mKWhFY3S0yE427qk1eg7msqT613rWMe7JAnnsZAAWFo6QAbvIQsiuOEbqjFJIq3pIDyUugIIbHk7zPz6JC3T2WMevqnv9JMa3fsQuSVW5uitGFhyMatWL38A0zXVrDcqSrDPk7TzDsBOb471Nb1sIJ3
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x54
movsb byte es:[edi], byte [esi]
mov esi, str.Dc0TZEBqK4PkFld0oUgzMmXg5puyvuUtwzy5uwo2auGRw5j8g09rFuFMzctvbxntJyFfVjtOkt5MB0AVc9DOZDeXjTSCJqJVoHlqf4LdX6lOygRLXhppDz9dmA0Q9rP749ls2XOhzf1TZpYI60UC6E43CZG61Iz5rWME3TGz2wyxAbzXRuV2pC0XXofdcn35jPbW3ALQHXk65DMiTPE5kW63lbYaM3qcrpdiTTjpONrilzZMLC4fMDtkoB9J7kw2tIR2J9vrKciPSQ70b5gksqwSRwhlawOMRAZ46Ft38eIgGBNpriMe4WRhTg7gqSEavT5BnLLW5J4oOEz
lea edi, [ebp - 0xe04]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3e
lea edi, [ebp - 0x2cc]
mov esi, str.1J9iVr3VJiLQeEpnxqcZzT2jV5jqktKqs9aIM4Lau8MUHssKi6GW7Riwp9Q8eQxKtUziSvQjaYPkpusM0B0cQBZYOXljEjavMw2Xm3qIMc5YjweptZQO1ZL5uWhT8FpmOqYRE04Bhm0m096b0HuOiagwIqfDlYwlsAXA06nZfnFQr9lcljjAMoYTjClndUE8BYq4GdvOxrXZnGmSzx02FrkO6rqnZUqmRgrJT7WYhAuh4D55NbkOqAZ
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4e
lea edi, [ebp - 0x63c]
mov esi, str.AE2dk4fJf05ufVmTDPsFBwBocyQ1Q5LIZx7jg8sJ8gJVxBbA3oOLBNvZUYeZBofKiOnqSmTQZhOci1xxcp2sOgeSX6pNutiTY530nkBeSWBO8Sp6liAl3v3YFRGdm49blzznPerE4QYZYotLvhHvPbsDj0AdtmPY8jyhfj0k2TWRT9EO99WKlimyLbkpmSuj49bfc1LoME8AYp30zmw022kmyUc9nXfMSBdphmzfoP2ssCY306eXsiCdVTQGs5vXmgjxBTQxrvhex3kRbUrTDmpunUrQfR0TP6dkEwWzFizA8WYvsOhMKIahK
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5f
movsw word es:[edi], word [esi]
mov esi, str.7py9hLseo2hPe8kqYE8HaxjKYdbgK5Kljb5LT5BzI1lmyJ7LMDJaxtsWYsBGOTqPRHoINVcsHneiktHJoxCUOJKscfehMXKVXj1291uTC45xPrXHLWShiHgdY9gbF85ZojfB8opJCBjP7AMFKoW1ASMBLk2SSbwJ5XYUH73eDaFVz5Q3VnN7AQnGIahyK4qlPfyYn6Jv2nzHcz4NPUbyjb0yXZGW1RYEhqNVDvp8kpQTyAhkXLV1OCwolb2yQumzrWQu5FrVQfKhVz0MOUWlsv5xjVUSs5DhSETa4cV2YMNtsicH7GONGs6IeFeDZhA5hUvv9sb9nnvjDZJ2zbYQ6LsVDvw1MYkU5kOfW3vm4PZqX4FZkBDWwapAqMESgK
lea edi, [ebp - 0x1258]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x58
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.txg1K6QaStAB6gYIi4u43FwGwQaLeofGoXmZimt3BPPltnWPvWIuiDBzig9DMvx69NvNSHgGn5rjSJEq4NoFSIHwDUyREspdlubeWYaeV0NEJNR8LsASXn5dTtL245Fgsu4Uz9D2rRltIdlLtMaYbpyxV8p6QITUwAKKCPff5S0taQyQvMdfG0nRWyVmYosiDa9LzHEVhzWy1f3om41cRhKAWVddBbY5xeiEnt8dczMd2Hx0cdiUHp9xkMxEr1TrjhK0tWNKk4mGAttBAGOEPT47fGeOAO5j9c0H6bIF9x2roJHxkx1JgFsgIXKjfeb2SKgPtZqHHjgKulgNxjKnSGQUqVnXAKXgo
lea edi, [ebp - 0xf68]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x33
movsw word es:[edi], word [esi]
mov esi, str.ffGjQums6f02ImnhtNuN4uTnIDZqFmIkrjxFQbjKpuWUHdWkz4YKHGAnyVMuSZVrPqIQr30Cdn2cMNcZeYBgACw58KdPBeqIxCYZfISJ4AI6fMLUL0dRSPh2YkFDIGEEQHDktJZS48pG2dOEvjiX8Y6x4X0E3VtQBIVcj9NICTYx1RXeaAUOodCygQMYumNkx646vFEast0wmq
lea edi, [ebp - 0xe0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x73
mov dword [ebp - 0x20b0], 0
mov dword [ebp - 0x20ac], 0
mov dword [ebp - 0x20a8], 0
movsb byte es:[edi], byte [esi]
mov esi, str.MCiFhhpGdark74zgUIoGFrkkw4X5Y6Rx3qZuJupXUo8UsaZ5doyIL38zS9ru2fhpcIeL77qHKd5ItCSvRy1GJogoFF3JKdsU28IMgBG372AzrUEArFbRYgNCNsu5bcTW0NXBv9299ZJxKLYCfs4b8Hy8U4v4gTu8CZcVQSRa3eQvb7N2N5NdTD5KkjcLEzPU9kikI2pQbi5IUAZuznU0upgvn6EB83OEMOaU39fdA5XcfztAybUNvppS8bKvK5nE5R5MGh4RXbUXi9AAbXUzmjW2VaZt3IzE3eJcXMHQqUXCoGUWBAW5mmgr51fpoKFKthDoSCBBe6pFoesxRK8cBd0G9wJ3J3zxG4gSpwYUmW2udqVpScuBB2cDt0qrlhQabeGI3WDlbMfYKGzk1OU0ujQyEaQqZxfQg1OLdiy5zidDxpGF9VYeC4valzkalhC1E5pFuTNAnL3p
lea edi, [ebp - 0x191c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsb byte es:[edi], byte [esi]
mov esi, str.P3W5zpPQsLHaD9xWNGgkIeYV3XIbpsMBuwDvqlbOAEvCW8JO0Dx6sny8i81x00ixNWETppx4YVnEFGU52qNFYpaaknTr880IGyN6vMDZY2pt8Hjxv6iK8dH8h2R8qlgprYvGGIfkdB3OMz0cPnKsmMubk7NxilmTdMwKzc3YTOfn1o8zzUriFxhDt0V0AF53xeM0HvC26npnh9HcNTd2yM2X2ZgYkQdd73gQSFG9S8Vx9zJXwGL5Au0YGIEfkec8NFzTax590Yu7JUAnlDHziVOMNslyr0EhB7KE4TptoMQu5Sz1b4nDZu51xRRzn6NqwAss23IsuS33p5ooEt1NhJ9hKWgIKI4wvsbSxjLetN2ZTlMxaRML1MVgOwhINsTIwKbut6Aal6Pd2h2UpDsYClm4Ob0WMG8jxnGr1ndT8zKh02CIX1PbuQQO04DYh2GwbSgkNxpOG15KVvrqGskYKISqE8TN5Nbr8iNUoVKwFkBlX2Z
lea edi, [ebp - 0x1b0c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
lea edi, [ebp - 0x780]
mov esi, str.xDDiTB1n97C2j8NXe1EGZUEJJaaDDOC8rlW6QlnoN8K6fx4PX83IxeWL7e8FdWO3bs3c2tk9kSPeav87mYuOaA5cGjIXZqDJ1LIy9NRju4jg5hMi1penUdF313bB2ROyUyfM6Z8Tyt7dSqaRQUlJtV2UoFNI2sYlHLbIKFdbeHN8GOONBipNZBzCUWgKbYHW2PRw1J7eHypwiwfXSEo3Icc0Z8qvTqon0q0EEmUxqEVmp3RdEHCRLUpWW22b4NIwY5IJQAkb6eaqyGAIT7EAgIl3yyb6OhLzRiKkmydybzC7g0GNqTwhb3S4C41HQGT7S
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x174c]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x1ec4]
call fcn.00405a00
lea eax, [ebp - 0x1ec4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
mov eax, dword [ebp - 0x1eb0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x509413
inc eax
lea ecx, [ebp - 0x1ec4]
push eax
push dword [ebp - 0x1ec4]
call fcn.00407d40
lea eax, [ebp - 0x13e4]
mov dword [ebp - 0x1eb0], 0xf
push eax
lea ecx, [ebp - 0x1ef4]
mov dword [ebp - 0x1eb4], 0
mov byte [ebp - 0x1ec4], 0
call fcn.00405a00
lea eax, [ebp - 0x1ef4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1ef4]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0x1f0c]
call fcn.00405a00
lea eax, [ebp - 0x1f0c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f0c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1d00]
push eax
lea ecx, [ebp - 0x20a4]
call fcn.00405a00
lea eax, [ebp - 0x20a4]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x20a4]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x500]
push eax
lea ecx, [ebp - 0x1f3c]
call fcn.00405a00
lea eax, [ebp - 0x1f3c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f3c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0x1f54]
call fcn.00405a00
lea eax, [ebp - 0x1f54]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f54]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x1f6c]
call fcn.00405a00
lea eax, [ebp - 0x1f6c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f6c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x10d8]
push eax
lea ecx, [ebp - 0x1f84]
call fcn.00405a00
lea eax, [ebp - 0x1f84]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f84]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1588]
push eax
lea ecx, [ebp - 0x208c]
call fcn.00405a00
lea eax, [ebp - 0x208c]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x208c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1eac]
push eax
lea ecx, [ebp - 0x1f9c]
call fcn.00405a00
lea eax, [ebp - 0x1f9c]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f9c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.00405a00
lea eax, [ebp - 0x1fb4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xe04]
push eax
lea ecx, [ebp - 0x1fcc]
call fcn.00405a00
lea eax, [ebp - 0x1fcc]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1fcc]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.00405a00
lea eax, [ebp - 0x1fe4]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x1ffc]
call fcn.00405a00
lea eax, [ebp - 0x1ffc]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1ffc]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1258]
push eax
lea ecx, [ebp - 0x202c]
call fcn.00405a00
lea eax, [ebp - 0x202c]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x202c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xf68]
push eax
lea ecx, [ebp - 0x2014]
call fcn.00405a00
lea eax, [ebp - 0x2014]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x2014]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x2044]
call fcn.00405a00
lea eax, [ebp - 0x2044]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x2044]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x191c]
push eax
lea ecx, [ebp - 0x205c]
call fcn.00405a00
lea eax, [ebp - 0x205c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1b0c]
push eax
lea ecx, [ebp - 0x2074]
call fcn.00405a00
lea eax, [ebp - 0x2074]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x780]
push eax
lea ecx, [ebp - 0x1f24]
call fcn.00405a00
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x1f24]
push eax
lea ecx, [ebp - 0x20b0]
call fcn.00407ea0
lea ecx, [ebp - 0x1f24]
mov byte [ebp - 4], 0
call fcn.00405b60
call fcn.00500d20
mov ecx, eax
call fcn.00418090
test eax, eax
je 0x509928
xor ecx, ecx
mov dword [ebp - 0x1ec8], 7
push 0xffffffffffffffff
push ecx
add eax, 0xd8
mov word [ebp - 0x1edc], cx
push eax
lea ecx, [ebp - 0x1edc]
mov dword [ebp - 0x1ecc], 0
call fcn.00402a50
push 0x288
lea eax, [ebp - 0xb4c]
push 0
push eax
call fcn.007512b0
add esp, 0xc
xor ecx, ecx
movzx eax, word [ecx + str._e__select_]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0xb4e], ax
test ax, ax
jne 0x5098a0
cmp dword [ebp - 0x1ec8], 8
lea eax, [ebp - 0x1edc]
cmovae eax, dword [ebp - 0x1edc]
mov esi, eax
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x5098d0
lea edi, [ebp - 0xb4c]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x5098e6
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
mov ecx, eax
lea eax, [ebp - 0xb4c]
push eax
push str.explorer
and ecx, 3
push str.open
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1edc]
call fcn.00402680
mov eax, dword [ebx + 0x520]
xor ecx, ecx
mov esi, dword [ebx + 0x51c]
mov edi, eax
sub edi, esi
xor ebx, ebx
add edi, 3
shr edi, 2
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x509965
nop dword [eax + eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x50995d
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
inc ebx
add esi, 4
cmp ebx, edi
jne 0x509950
lea ecx, [ebp - 0x20b0]
call fcn.00405ba0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e615c
mov esp, ebp
pop ebp
ret