Function at 0x512460
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a3f27
mov eax, dword fs:[0]
push eax
mov eax, 0x209c
call fcn.006e70d0
mov eax, dword [0x8ca144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x64
lea edi, [ebp - 0x1ea4]
mov esi, str.udISaYBZT7oSVU7qhcFALikcf5SkQ8hV1C7NHg7c8aRoGfBi29uOPwjTsPDW6kGfe7JndW40Eze2JyCpeg8MGWks5MrTTrvuQYQNm2sf1D7DJqjTtbuyUbsSacIbzsLLXLJyoaRWIGu31xaGT14iFZsZ1vPxen2apbpiQ6rssm5hwP9fWn2iGGSuMCApJhTlR6BBO9jBHbjskmfR2kBLdqBOCD7dUNuuZ5OuOYQGoLo2NXM7QVy4wXwZLk4hRnoG9eVbzcXqME5wpPuuAzSIDyBOJQ9RXkQgrvi7iSYOky2Vl5pFdAepNIlTTT3kKal3j1h27oKtW1f7ScD0x4PioqnCyHM6sPKEK2HayR5bEWqBkCsK9CYS2g33tg4JR1VmYOeQQMJBMNZSbtTm
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x57
movsb byte es:[edi], byte [esi]
mov esi, str.np6gOfcbqccyvXRB1aN95HMsRB1Kn5A5M6Rr5Q1NSOPXGvZoBNC0jFs2ysNft97cksVJ2eO1csIPxHxVqDoJHX8Xxg8WB9ClcOl8hLjkqCnB3QXg55fUGCNpoVPxukOOKC8Yp0jZfEMBpBHfJr8hTVsEFutC54FJTkzMlvknyrcuxri8OHsNWAI3xbXmKQiisegPsUlYq3vwpXPUxzWq2lZQm48WzGziohtXQT1LzU51eZIv5M14smUnRFYRaKU5bgG2sKwz5NLOqhiyVRx4IQ4qDMNxLCBBc2gpvIF8kqt5AxW79HfsPe3T4KqP20pbCa30h1PpTBbm0cPpMHuwc249AvxT
lea edi, [ebp - 0xd8c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x58
movsb byte es:[edi], byte [esi]
mov esi, str.ThTDY67oFC7mQrR0zd1L16YiU2etixtLZ831reSlB9AOV10reVHvBoceDkWzFGa3I6NERWea7smVrbe01w1BnR98BjsgpzshSaaInwFPWRgnQ6twVaVLleDPCtmlfu1gqxq7BRHrl2EzzjLCYsaIqzY8EFYWadorSYBEyUbvpFMOUuXssvVdcn37Hmck8eGhiw8FhRyUukkWQsxBD2AA9J8vMOOM7AhHNl2IDWLNiAVoKwva3qwqsp7P2WhkThORoaniGrl8vQZ4Q3PiFv3YHr8eslOJGqkGXoj1s0vCdGiRoe33VzHJM4bXgiIqAGtJ29zbtfB8vfvfrVBABucxAs36pwtssgMQh
lea edi, [ebp - 0xef0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5e
movsw word es:[edi], word [esi]
mov esi, str.nprPkbdYaMTHUUAG9x2TGSZNihDKW4V2fc10WS72rzS1dF2rZUaWsciaFiuBKsPvYWdQ7PKDsHTxJ91Z9Ark2bd4c0BYURt8KEXcsHe4tkakqc74wtUUIvKZOL5NmmR14jeqjBN2UHVL5kuDs81bIPnmh50IzD8eOe4wzrHIk0gXyFxiI9gqUUBOLetXANGB8tduDmKogOPJ6CYnyIVxcEsI6nSh0pnaoBv4X3ZpfhrDBfB19gmARKSNcnwrPdBirfEZqgzcbjQIpftLxoMPRTbFEIY17EX9NZVpgsZh5ae3cvYtE7T5QWrdCPDe8xDyiI4xoZT8Rm4MEZUeJ4TKJSikIP5yZ8jL0ypOkb4ceseaoWVZnaMBCvv2
lea edi, [ebp - 0x14b8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5d
movsb byte es:[edi], byte [esi]
mov esi, str.n6Vco8G3JgUiA63cYQGkdR72rcprWCGBDYS1f8nup5uqQ1ynGsh4SdUjYW6ES77MMfbinlfRtNH4d3FxLevVo5hTWAdVRFedHple2tVvInvS6O48HZyJKH3MteJj12SvOBoPqa5YXPNT2dJlWhka5Ykn8x3uKup0EUyyO0AVXQkohZdw0EFWSGfT2Nezu7OB1y8Sz6Ry69HUcdEjl7Ly9h3CccioyW6njgb0KL8XJurxoRLcuCQs7rxQiQyAGTpE006qROmjryI4mEdYNdTLHAWI164kx8QlQdXix9QnKLlbonxZSqHGG7CwcGHkQdSlrKGDKbytPODHbukPG1wF6geKIsxU6uk3pZ9X2onThGQcuAWBdVT
lea edi, [ebp - 0x133c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
lea edi, [ebp - 0x1980]
mov esi, str.6f7P4uUJyaT7itaxpfNNREX7Qz7rjClWjy2BmEYRbNvnJdIqga6cgSVyabi92UtYjaHWpJ8U4MvyOIVldLjylhRbiaxBa8Ca4O7IEdBPsdY3U4gCGKrvUI2LsHyfouQSERyn16MkctTpW7Ss6rmCLKzdh96dC0g0vuXeZ9SjA5ui6fV2on19ydwNtYu64Ejgh5xHTWgAAagg5sKbNAxzebRdxToLvqnUhsnOGysir4WREAuuImadouyPLGBby9njF71gEN6VpVqKDwyogytTuqVeRnuOORsfc29HEyc38nhBD02nZsvO9khlWW6BIqpIbks3ln3SZgWWgzgPCrNoya1JptRcr1NlK78sR6FmN2wBWvohIsKSD0BAbL4OUSM2SVEoztRuWqm6TZJjfgqE6XEh1GzDNrj3a3HqBcW29GE418y7o8sEpZT
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
lea edi, [ebp - 0x1d10]
mov esi, str.4Qw7m2xqGtvIzcK4h4bTCM9teSXOYCxSYkFKUhsXN5yYBgoblTzXW8OR6inAaibyTwJ6Hx5oSxwvtZ5JZPFBjo76S6HY4ZKfj0X6F6DIGdzFpL8i0sJJA2fr1l4FoPecTY6E4klYkEQIYeIznoL199OboI4PynBIHU6CsDkFSk5830DNcKcZV7aKOxasUuCCYPKsao6hFbQL7veEC6PhvMayEz03O5fAP9xnOpQFEoAWYD4LUeMKfm6zA4uwwMKIeuyHuEbsO5xLEPlzdYuDaHnfRnApcW3aWqZwPYRAc62YDnCi2OQpNhrlu9CsdZqB0wT7l7vzCnmHi9cltVweI7qGv6DM48zhXktmCFIVsMCjhKJfTvZdY3jkrjy19y3z38Hl4WLLNYgzZAEK9j6OTH9mnE0R36hE9rFKF8lERNXCJ17MlB2RTYBFcVpb8pFBcdJtaCOxWesm
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5b
movsb byte es:[edi], byte [esi]
mov esi, str.fCKEwG1OW6JyxK6u8hwOMpsJqvGH5h2I8ZgdjceMZoLgGn6VontFEX8gm157JacDNoCHXv8ZXqeaYzYSTEnM1Wc876NUfXQjkl5rcYRxnj8ShTTqxZU7COyDPFAFgIG7dlnfgRR8HgVGnipUMQgoXEJJcZQVrZdLD58WHif7nLflUK89nY9g8f7Yc9jxSZDK4DirlF1ugVGmZQ2zS45qUbtGnk3yUiAR06Vi4ENcm7NOdOr9b9TRvpOOW2jWzmn2JrqaJjqoyBI2FLSED3tI5cQ8xs7bgakSWjhaKbgEtlFWnOZAUXxxKsfAUHjghIDkb6o9pO5pi1WXMUehKU9RgcBrzJLIcvuBonoGH0SW24lSo
lea edi, [ebp - 0xad8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x55
movsw word es:[edi], word [esi]
mov esi, str.Zl5AwNcYuDjd4ZcXLP3xTvsIq9STffqO6VbKskIzJadWcpFMDLmyTZmILFOQwFuaGGRPtXoc48ONLEKT0m48a77CAS8kAvkcichs4GBIn3SBo9YTWsZGER8QKIJKMSeThar4kgtYogk0PRw7IxwwUuyoVDDLzk2dRrq9XwcjQnSg4jpcYC5pYjkHEDwx0qj1nU3SyMge7MSjboC8iJTtwVrv2qsLG5JqRF2miFpnTKDw8LjQWzBrHZEoWC4WZncQerjTTs1j91fRuE6JYUSQl9iNK16ensoSGnaChV751jgdviKtxQdwKsLSGeIQK1GycLzgcDsor6EPheX5R5W
lea edi, [ebp - 0xc2c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
lea edi, [ebp - 0x6e0]
mov esi, str.oRatOvy8q8iz9cSEK6tgjmvnRWNcQz5eRbFoS3QOvfc4eHeN4CCiTSqzIts35wqikifr8J5eqXD79JsPWFMHR61VL0IV4pueFbRVPpYoyI8cELvfgRozq6Oo1dUcX90AWrsWNENMlYGwFrjsKceDbNcX1T4PMmaeG2qmINLMKjEr0QWtfwl1vrVrFXz7ljUvNJdWLeboNBhoNyDmXxWX6oNcaK9FNKRsBbpWQGZTFJ1QTIsmO4qHfEmCFJ10wOFZz78w1lrRNJLk6oycvHaPaFIa1SGCEkST62WzS9O1DndeoLOYd9i9iU2GkKcFkggt
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6f
movsb byte es:[edi], byte [esi]
mov esi, str.fKKf4WgRQRRzZnX6Jf0fBegbABSq3pk4QmrjW7QJ0MMgi9m6dfTxz4kcx6dKIwoip0LCtJIrbif8Pg2jCVQQ6TQkfFAYm1eNvnweRt5bHDiIluosPH2YnTFTVm4guQ77cTPS6f7GOO8dV13mtFGu7ojZiMsSkmzWC4QwhbnoCJXvaIFZll54A8U0MtY9ZnMGDE3gmq4T2jlq17qZvRRkg138Lpl8uZl7l4Pcit7etNP90OVyL4J42IOeDccSyiEKFolwqoHdv891VOsjkWWV0JFQg8Kx1bi1HUb7SLsGT4L8HJ9FSFyJwa4wMipiRWT0vH0H785TMPTYWRMPk4bG34bFquWknVKU2iVYauvafJtrE2p0aj2tTR9ySQStqUgvGdcNyqHahsvs5mL4CcoAKlktTT9WibpV3XYUvkwaMKWYvHQ7NZkZsSs4m3smF3
lea edi, [ebp - 0x1b40]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x49
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Rh7KXIKgVO6tJN21AAIguvoCfr4IM5ADYEXyC2rBDnlKDT6x1cm7BMiWGvqSBUq4qhZmKnVapqSunQ0cM0dJuRKm1xpblBaHUafjnB4jDH30tDYLN2ncQ2ImSjcRTwOaRzDTpaq79Z3Fhw9jUZqXS4tO3gXToBwV1nG9CAAOuRu5xk6wvW9TtjfqRdQoKnZPTsIs0vqAYpPJ8oFTlAC7FyOpW5MlYZCFaZ58IQiQZ8WS82N7Ee7cb4UCo1JW9zbVRKtUw7JyQ31HbypLk8palsnPqyRkQlPihFoFGt
lea edi, [ebp - 0x59c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x40
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.mqFapHSRCCXwYiYgDUOSciI9XetpZtDLs9rhKq0fSYsiXuCbfQnpw3OPLpydLZBW9mHb9PSSmGVvK7IAsedgWgEKwpcdCgG7eO4eX4OuLOvPWXy2tw5RgP7RFo3H3Zv7I1B6Korfn7Nly83Vw53MA5aD1tc2hBwFWForn3cOJRf7EvoR8vH5aE3oLyE8cuayUQkMLcxDsigXQi6a2MiDnzZ0qP4TvfdRZgGRVOhZJZu43JpmujKq3bFfIukAHDHC
lea edi, [ebp - 0x114]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x43
movsb byte es:[edi], byte [esi]
mov esi, str.urAGMBFjWlY0u0KytZwhdy50qPpI6IOxGCzSmzM8XhXcGVMaq0ks7giJaECbJAVSmvksQJkBS4JNx8ucCQmEBVppLAcBrtBfCfnnzuvr9MzGFwjYTjaI3yQxD4IJVRRT2ZztAa7O8oZcLRdckISZOH7S1woz7OBnRHEvkgkTilGQsJc30S4RoLDIeXS2uhhJDQZu3xdeKPl91sIoczVltEgStEqYFSteWBYtJzOjxZXSZWbPjalmlxm6bLHjZEldPVxAOjxCLW1p
lea edi, [ebp - 0x224]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x48
movsb byte es:[edi], byte [esi]
mov esi, str.OudBBCXGmBza1w7tcQPahc89wj8PhW87MVpJQZfrcfUpLbPzeQUFJS00uqmRYPfAYgsyZ8YsSZkNueuANInSuxQvjeT0zxXSyOM0dTRrU4wUl07T4qNgj7koRpc0gqsNtL6Q3oRPpnhtSVLqxqg9zdDkQX94b3ZuqD9lUvlKyCIrq7m73A9FKDf5SzdfE57NimUhyJLgoQXTOG7iowGuQEgH2Xn21xGuTSKkUauNon9WkQpncVtS0RPycrvZ3hHMgmn7inV35hJKdUwwXV2Sf7ILhfbYx2p
lea edi, [ebp - 0x474]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5f
lea edi, [ebp - 0x1634]
mov esi, str.NKSYzkWRP1eRsnBeBw1aNefKqlyH5JKpukqvyQTFjrYTakdvzQMtKweNR6ySAUP8cJyWY2qR0Rz3CNnHggyJKTXTpeJdV6u2fbScpJ7IwJR3cxWPlWwFRxAVRUid0E5Uhc6FoQwSzhigy6OXW4Q4mymgHkqbmu4iuSORzHusNQOhScuTj6FVDd6AzwVqqi900Fp3n3FbGUbiOcfFfcG005zNRMWIhtgekmXTM9aQjkOUbsvD97enilhKlWRm6RUtK5B1pLo17moMi6H6RLfg5XoXPloYGagX8K0BwY5cPhjxgBokGPYLPsmzlLcBJLuUjUovuHe7cWA0xlPFFF2ScuXVKYYbRqhhXR6EsxWqTm0nGZNwcHFU8G6JhuU
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4b
lea edi, [ebp - 0x354]
mov esi, str.UfEf0VbUfYbYzVitQKOF0x2Ne0QUYS7eDMOtE2aPwLUrzg4BMFR8aPu92wkEUmMdOyyuBOUShrgBsOjtbJyxyoa5wMDJwGCk8VMpSc5vxjk7MYMXV96D42ZtHzxhdZ9hCWM2DaIqPqdd1x1TlHva1TNFIhV1qdckUYgA0auHyDJ1k6SX2XD8NXBVA1ijPei1hSOveL1UA8FvznuR6GL7lyAooswqLwDRmAZplTwTobMHOEnYy0c7CLdmleMavf0zz5KtPU4PJvASm2JcXvqJrb5n5eyPqo6CTMbT8gwrXoAM5d
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x5b
mov dword [ebp - 0x20a8], 0
mov dword [ebp - 0x20a4], 0
mov dword [ebp - 0x20a0], 0
movsb byte es:[edi], byte [esi]
mov esi, str.x89AyiFztj6OJQ9CTSkelO7ZEe4QBmrwiCNhTKLUmaIgQKYjJ6n7aeOy8grzoJsvBODLOEqmJStfjrInd5Z76cDPMXXevDMPE4tvzgCqmIxQOLc1lxG5BYqzBJNyMXwsdeh4JnePrrocL6GYQV2Fj1WOHtxif7c7KZfHsYSXpK0hQIeOofKzWDv4h1Zsz0CLu9zyo7FsMLtG1B0G9Rw1nzV1zGzSAEpRtS2k9REvYZLcfLDnnqsdwO4mzfwLh53QTO6ripsBzplQdXueWfjsd96CpzFjZy8zLvQJz4n3Z0HgO1NsRvfrwQWx06XQZ4OENiXzXlRG7XLRak4tG1EnMLKCv00RVOSyBdkp8ug0qEcAc
lea edi, [ebp - 0x11c8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x64
movsw word es:[edi], word [esi]
mov esi, str.oibJOx5GCOm8TUXUwNy6OFCMIcGUkn2mrouKdEBChx0DMeFHqbVQRXUuPfkcvGDI7GGHaE7N7sfMNRhhcA2H1i6f4ABgkmNiRYrvPlehS6Hq97SrgtaZsevqwl3BhFNMnlfhGkxa4cgMCpqcPSBfzwuvkHigXHIx1IPlGDDSPpWQeStpRMSOZFQ9KxZuhb1ENBWGddfOUn87tHUso8HgYN8NBDwWU3iUXd67xKP8lL06tvJM3AzclPR13Tr4KRbIuRDGsIMzmQEWTgIYzWldEPhit3mZHyWCYWZsqgK1884thnVfxyUmmjO9Pu5E5PTJ7dPggZhHliv6d5gwZl4f9VTM2ZJLifsCV1CeO8SGb7Bueg2972rdT4Cc1GkHDuKtywoyk8DQGwYL2DJ3yr
lea edi, [ebp - 0x17c8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5a
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.bubtORGmls5vn3W7phJsT0aBbBVPye5ftxRoTCWsu5orvXiMWuWE8wJEw7bx9LnZ2mBRSAjknSWNGWSRYDGZhq0tSkOYqcS7yffdVRviWtE5DAYqdKGUAY8GLtm7vpwryc4e9jZE0bRpk5UfBppEqJxDMP4yXQ4R5TtQ1O63KWDVSTi3BDNqP7G71HRJtjNYhnESaFYZODym4UZKzF9st04aTNzN3VGz8cUEpvsEx4cax2NAGGewGMsQJYK6FSQ1FN8UIjM8W15lfObM0hkia3CYnqftRctzmoD28bujIcV2JZx7ZWuem2buIV3ZOTkhiz02iegGrXeiGagnIcypA1c4fwjsklkMewVVmgc
lea edi, [ebp - 0x1058]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1ea4]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x1ebc]
call fcn.00405a50
lea eax, [ebp - 0x1ebc]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
mov eax, dword [ebp - 0x1ea8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x512684
inc eax
lea ecx, [ebp - 0x1ebc]
push eax
push dword [ebp - 0x1ebc]
call fcn.004081f0
lea eax, [ebp - 0xd8c]
mov dword [ebp - 0x1ea8], 0xf
push eax
lea ecx, [ebp - 0x1ed4]
mov dword [ebp - 0x1eac], 0
mov byte [ebp - 0x1ebc], 0
call fcn.00405a50
lea eax, [ebp - 0x1ed4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
mov eax, dword [ebp - 0x1ec0]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x5126e9
inc eax
lea ecx, [ebp - 0x1ed4]
push eax
push dword [ebp - 0x1ed4]
call fcn.004081f0
lea eax, [ebp - 0xef0]
mov dword [ebp - 0x1ec0], 0xf
push eax
lea ecx, [ebp - 0x1eec]
mov dword [ebp - 0x1ec4], 0
mov byte [ebp - 0x1ed4], 0
call fcn.00405a50
lea eax, [ebp - 0x1eec]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
mov eax, dword [ebp - 0x1ed8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x51274e
inc eax
lea ecx, [ebp - 0x1eec]
push eax
push dword [ebp - 0x1eec]
call fcn.004081f0
lea eax, [ebp - 0x14b8]
mov dword [ebp - 0x1ed8], 0xf
push eax
lea ecx, [ebp - 0x206c]
mov dword [ebp - 0x1edc], 0
mov byte [ebp - 0x1eec], 0
call fcn.00405a50
lea eax, [ebp - 0x206c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x206c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x133c]
push eax
lea ecx, [ebp - 0x2084]
call fcn.00405a50
lea eax, [ebp - 0x2084]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1980]
push eax
lea ecx, [ebp - 0x209c]
call fcn.00405a50
lea eax, [ebp - 0x209c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1d10]
push eax
lea ecx, [ebp - 0x1f34]
call fcn.00405a50
lea eax, [ebp - 0x1f34]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f34]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0xad8]
push eax
lea ecx, [ebp - 0x1f4c]
call fcn.00405a50
lea eax, [ebp - 0x1f4c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f4c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0xc2c]
push eax
lea ecx, [ebp - 0x2054]
call fcn.00405a50
lea eax, [ebp - 0x2054]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x2054]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x6e0]
push eax
lea ecx, [ebp - 0x1f64]
call fcn.00405a50
lea eax, [ebp - 0x1f64]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f64]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1b40]
push eax
lea ecx, [ebp - 0x1f7c]
call fcn.00405a50
lea eax, [ebp - 0x1f7c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f7c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x59c]
push eax
lea ecx, [ebp - 0x1f94]
call fcn.00405a50
lea eax, [ebp - 0x1f94]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f94]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x1fac]
call fcn.00405a50
lea eax, [ebp - 0x1fac]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1fac]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.00405a50
lea eax, [ebp - 0x1fc4]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1fc4]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x2024]
call fcn.00405a50
lea eax, [ebp - 0x2024]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x2024]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1634]
push eax
lea ecx, [ebp - 0x1fdc]
call fcn.00405a50
lea eax, [ebp - 0x1fdc]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1fdc]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.00405a50
lea eax, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x11c8]
push eax
lea ecx, [ebp - 0x200c]
call fcn.00405a50
lea eax, [ebp - 0x200c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x200c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x17c8]
push eax
lea ecx, [ebp - 0x203c]
call fcn.00405a50
lea eax, [ebp - 0x203c]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x203c]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x1f1c]
call fcn.00405a50
lea eax, [ebp - 0x1f1c]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x20a8]
call fcn.004082f0
lea ecx, [ebp - 0x1f1c]
mov byte [ebp - 4], 0
call fcn.00405ba0
call fcn.0050a3d0
mov ecx, eax
call fcn.004184a0
test eax, eax
je 0x512bf8
xor ecx, ecx
mov dword [ebp - 0x1ef0], 7
push 0xffffffffffffffff
push ecx
add eax, 0xd8
mov word [ebp - 0x1f04], cx
push eax
lea ecx, [ebp - 0x1f04]
mov dword [ebp - 0x1ef4], 0
call fcn.00402aa0
push 0x288
lea eax, [ebp - 0x968]
push 0
push eax
call fcn.0074fc20
add esp, 0xc
xor ecx, ecx
nop dword [eax]
movzx eax, word [ecx + str._e__select_]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x96a], ax
test ax, ax
jne 0x512b70
cmp dword [ebp - 0x1ef0], 8
lea eax, [ebp - 0x1f04]
cmovae eax, dword [ebp - 0x1f04]
mov esi, eax
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x512ba0
lea edi, [ebp - 0x968]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x512bb6
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 5
push 0
mov ecx, eax
lea eax, [ebp - 0x968]
push eax
push str.explorer
and ecx, 3
push str.open
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x1f04]
call fcn.00402680
mov eax, dword [ebx + 0x520]
xor ecx, ecx
mov esi, dword [ebx + 0x51c]
mov edi, eax
sub edi, esi
xor ebx, ebx
add edi, 3
shr edi, 2
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x512c35
nop dword [eax + eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x512c2d
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
inc ebx
add esi, 4
cmp ebx, edi
jne 0x512c20
lea ecx, [ebp - 0x20a8]
call fcn.00405be0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e70bb
mov esp, ebp
pop ebp
ret