Function at 0x43aff3
Capabilities:
Check if file exists
Check os version
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48732e
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x4b1014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a54c
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 0
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a573
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 1
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a597
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a5bb
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 3
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a5df
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 4
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a603
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 5
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a627
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x40], ebx
mov byte [ebp - 4], 6
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43a64b
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x50], edi
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18]
push str.filePath
mov byte [ebp - 0x55], 0
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43bfcc
mov eax, dword [ebp - 0x18]
cmp byte [eax + 8], 0
jne 0x43a689
mov eax, 0x4b5590
jmp 0x43a70b
lea ecx, [ebp - 0x4c]
xorps xmm0, xmm0
push ecx
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x4c], xmm0
push ecx
mov ecx, dword [eax]
mov dword [ebp - 0x4c], str.filePath
mov dword [ebp - 0x48], 0
call fcn.0044fb40
mov ecx, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ecx]
cmp eax, dword [ecx]
jne 0x43a6df
mov byte [ebp - 4], 8
cmp dword [ebp - 0x4c], 0
je 0x43a6d8
cmp dword [ebp - 0x48], 1
jne 0x43a6d8
call fcn.0044e9d0
push dword [ebp - 0x4c]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b5590
jmp 0x43a707
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x4c], 0
je 0x43a707
cmp dword [ebp - 0x48], 1
jne 0x43a707
call fcn.0044e9d0
push dword [ebp - 0x4c]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
cmp byte [eax + 8], 4
jne 0x43bfcc
mov esi, dword [ebp - 0x18]
cmp byte [esi + 8], 0
jne 0x43a725
mov eax, 0x4b5590
jmp 0x43a7a4
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.filePath
mov dword [ebp - 0x20], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43a778
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0
je 0x43a771
cmp dword [ebp - 0x20], 1
jne 0x43a771
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b5590
jmp 0x43a7a0
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x24], 0
je 0x43a7a0
cmp dword [ebp - 0x20], 1
jne 0x43a7a0
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov edx, dword [eax]
test edx, edx
jne 0x43a7ae
xor ecx, ecx
jmp 0x43a7c0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43a7b6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ffa0
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
call fcn.0045aa70
push str.type
mov ecx, esi
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43bf10
cmp byte [esi + 8], 0
jne 0x43a7fc
mov eax, 0x4b5590
jmp 0x43a87b
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.type
mov dword [ebp - 0x20], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43a84f
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x24], 0
je 0x43a848
cmp dword [ebp - 0x20], 1
jne 0x43a848
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b5590
jmp 0x43a877
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x24], 0
je 0x43a877
cmp dword [ebp - 0x20], 1
jne 0x43a877
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov al, byte [eax + 8]
cmp al, 1
je 0x43a892
cmp al, 2
je 0x43a892
cmp al, 5
je 0x43a892
cmp al, 3
jne 0x43bf10
cmp byte [esi + 8], 0
jne 0x43a8a2
mov eax, 0x4b5590
jmp 0x43a921
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.type
mov dword [ebp - 0x20], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43a8f5
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x24], 0
je 0x43a8ee
cmp dword [ebp - 0x20], 1
jne 0x43a8ee
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b5590
jmp 0x43a91d
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x24], 0
je 0x43a91d
cmp dword [ebp - 0x20], 1
jne 0x43a91d
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0044efa0
push str.name
mov ecx, esi
mov dword [ebp - 0x48], eax
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43be54
cmp byte [esi + 8], 0
jne 0x43a952
mov eax, 0x4b5590
jmp 0x43a9d1
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.name
mov dword [ebp - 0x20], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43a9a5
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x24], 0
je 0x43a99e
cmp dword [ebp - 0x20], 1
jne 0x43a99e
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b5590
jmp 0x43a9cd
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x24], 0
je 0x43a9cd
cmp dword [ebp - 0x20], 1
jne 0x43a9cd
call fcn.0044e9d0
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
cmp byte [eax + 8], 4
jne 0x43be54
cmp byte [esi + 8], 0
jne 0x43a9e8
mov edi, 0x4b5590
jmp 0x43aa5f
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.name
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43aa3a
mov byte [ebp - 4], 0x12
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43aa33
cmp dword [ebp - 0x18], 1
jne 0x43aa33
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43aa5b
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x13
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43aa5b
cmp dword [ebp - 0x18], 1
jne 0x43aa5b
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x43aa69
xor ecx, ecx
jmp 0x43aa79
mov ecx, edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43aa70
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ffa0
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x44]
call fcn.0045aa70
push str.description
mov ecx, esi
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43abe4
cmp byte [esi + 8], 0
jne 0x43aab2
mov edi, 0x4b5590
jmp 0x43ab29
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.description
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43ab04
mov byte [ebp - 4], 0x14
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43aafd
cmp dword [ebp - 0x18], 1
jne 0x43aafd
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43ab25
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ab25
cmp dword [ebp - 0x18], 1
jne 0x43ab25
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x43abe4
cmp byte [esi + 8], 0
jne 0x43ab40
mov edi, 0x4b5590
jmp 0x43abb7
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.description
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43ab92
mov byte [ebp - 4], 0x16
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43ab8b
cmp dword [ebp - 0x18], 1
jne 0x43ab8b
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43abb3
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x17
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43abb3
cmp dword [ebp - 0x18], 1
jne 0x43abb3
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x43abc1
xor ecx, ecx
jmp 0x43abcf
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43abc6
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ffa0
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x44]
call fcn.0045aa70
push str.iconPath
mov ecx, esi
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43ad3e
cmp byte [esi + 8], 0
jne 0x43ac08
mov edi, 0x4b5590
jmp 0x43ac7f
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.iconPath
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43ac5a
mov byte [ebp - 4], 0x18
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43ac53
cmp dword [ebp - 0x18], 1
jne 0x43ac53
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43ac7b
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x19
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ac7b
cmp dword [ebp - 0x18], 1
jne 0x43ac7b
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x43ad3e
cmp byte [esi + 8], 0
jne 0x43ac96
mov edi, 0x4b5590
jmp 0x43ad0d
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.iconPath
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43ace8
mov byte [ebp - 4], 0x1a
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43ace1
cmp dword [ebp - 0x18], 1
jne 0x43ace1
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43ad09
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1b
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ad09
cmp dword [ebp - 0x18], 1
jne 0x43ad09
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x43ad17
xor ecx, ecx
jmp 0x43ad29
mov ecx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ad20
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ffa0
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x44]
call fcn.0045aa70
push str.commandLine
mov ecx, esi
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43ae94
cmp byte [esi + 8], 0
jne 0x43ad62
mov edi, 0x4b5590
jmp 0x43add9
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.commandLine
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43adb4
mov byte [ebp - 4], 0x1c
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43adad
cmp dword [ebp - 0x18], 1
jne 0x43adad
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43add5
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1d
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43add5
cmp dword [ebp - 0x18], 1
jne 0x43add5
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x43ae94
cmp byte [esi + 8], 0
jne 0x43adf0
mov edi, 0x4b5590
jmp 0x43ae67
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.commandLine
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43ae42
mov byte [ebp - 4], 0x1e
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43ae3b
cmp dword [ebp - 0x18], 1
jne 0x43ae3b
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43ae63
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1f
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43ae63
cmp dword [ebp - 0x18], 1
jne 0x43ae63
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x43ae71
xor ecx, ecx
jmp 0x43ae7f
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ae76
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ffa0
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x44]
call fcn.0045aa70
push str.public
mov ecx, esi
call fcn.0044f800
cmp eax, 0x4b5590
je 0x43b00d
cmp byte [esi + 8], 0
jne 0x43aeb8
mov edi, 0x4b5590
jmp 0x43af2f
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.public
mov dword [ebp - 0x18], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43af0a
mov byte [ebp - 4], 0x20
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43af03
cmp dword [ebp - 0x18], 1
jne 0x43af03
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b5590
jmp 0x43af2b
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x21
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x43af2b
cmp dword [ebp - 0x18], 1
jne 0x43af2b
call fcn.0044e9d0
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 5
jne 0x43b00d
cmp byte [esi + 8], 0
jne 0x43af46
mov esi, 0x4b5590
jmp 0x43afbd
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.public
mov dword [ebp - 0x20], 0
call fcn.0044fb40
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x43af98
mov byte [ebp - 4], 0x22
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x43af91
cmp dword [ebp - 0x20], 1
jne 0x43af91
call fcn.0044e9d0
push esi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, 0x4b5590
jmp 0x43afb9
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0x23
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x43afb9
cmp dword [ebp - 0x20], 1
jne 0x43afb9
call fcn.0044e9d0
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
movsx eax, byte [esi + 8]
cmp eax, 7
ja case.0x43afc6.0
jmp dword [eax*4 + 0x43c1ac]
xor bl, bl
jmp 0x43b010
cmp dword [esi], 0
setne bl
jmp 0x43b010
movsd xmm0, qword [esi]
ucomisd xmm0, qword [0x4a1040]
lahf
test ah, 0x44
jnp case.0x43afc6.0
mov bl, 1
jmp 0x43b010
mov bl, byte [esi]
jmp 0x43b010
mov eax, dword [esi]
test eax, eax
je case.0x43afc6.0
cmp byte [eax], 0
je case.0x43afc6.0
mov bl, 1
jmp 0x43b010
mov eax, dword [esi]
cmp dword [eax + 4], 0
setne bl
jmp 0x43b010
mov bl, byte [ebp - 0x55]
mov eax, dword [0x4b541c]
test eax, eax
jne 0x43b04c
push 0x230
call fcn.0045dac5
mov esi, eax
mov dword [ebp - 0x20], esi
push 0x230
push 0
push esi
mov byte [ebp - 4], 0x24
call fcn.00462380
add esp, 0x10
mov ecx, esi
call fcn.00428910
mov byte [ebp - 4], 7
mov dword [0x4b541c], eax
cmp byte [eax + 0x208], 0
je 0x43b104
lea ecx, [eax + 0x218]
push ecx
lea edx, [eax + 0x210]
lea ecx, [ebp - 0x2c]
call fcn.0045b9e0
mov edx, dword [0x4b541c]
add esp, 4
test edx, edx
jne 0x43b0b1
push 0x230
call fcn.0045dac5
mov esi, eax
mov dword [ebp - 0x14], esi
push 0x230
push 0
push esi
mov byte [ebp - 4], 0x27
call fcn.00462380
add esp, 0x10
mov ecx, esi
call fcn.00428910
mov edx, eax
mov byte [ebp - 4], 7
mov dword [0x4b541c], edx
mov edi, edx
test edx, edx
jne 0x43b0ec
push 0x230
call fcn.0045dac5
mov esi, eax
mov dword [ebp - 0x14], esi
push 0x230
push edi
push esi
mov byte [ebp - 4], 0x28
call fcn.00462380
add esp, 0x10
mov ecx, esi
call fcn.00428910
mov edx, eax
mov byte [ebp - 4], 7
mov dword [0x4b541c], edx
lea eax, [edi + 0x218]
add edx, 0x210
push eax
lea ecx, [ebp - 0x50]
call fcn.0045b9e0
add esp, 4
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43b119
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
setbe byte [ebp - 0x55]
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43b149
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0x2a
test bl, bl
je 0x43b330
mov eax, dword [ebp - 0x48]
or ebx, 0xffffffff
test eax, eax
jne 0x43b1e0
call fcn.0040f7b0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x43b1b9
test ecx, ecx
jne 0x43b185
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2b
push str.PUBLIC
lea esi, [ebp - 0x14]
call fcn.0042dad0
mov ecx, esi
call fcn.0045a240
mov esi, dword [ebp - 0x14]
push esi
push str._sDesktop
jmp 0x43b30c
test ecx, ecx
jne 0x43b1c7
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2c
push str.ALLUSERSPROFILE
jmp 0x43b19c
cmp eax, 1
jne 0x43b27a
call fcn.0040f7b0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x43b238
test ecx, ecx
jne 0x43b204
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2d
push str.PROGRAMDATA
lea esi, [ebp - 0x14]
call fcn.0042dad0
mov ecx, esi
call fcn.0045a240
mov esi, dword [ebp - 0x14]
push esi
push str._sMicrosoftWindowsStart_MenuPrograms
jmp 0x43b30c
test ecx, ecx
jne 0x43b246
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2e
push str.ALLUSERSPROFILE
lea esi, [ebp - 0x14]
call fcn.0042dad0
mov ecx, esi
call fcn.0045a240
mov esi, dword [ebp - 0x14]
push esi
push str._sStart_MenuPrograms
jmp 0x43b30c
cmp eax, 2
jne 0x43b36a
call fcn.0040f7b0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x43b2cf
test ecx, ecx
jne 0x43b29e
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2f
push str.PROGRAMDATA
lea esi, [ebp - 0x14]
call fcn.0042dad0
mov ecx, esi
call fcn.0045a240
mov esi, dword [ebp - 0x14]
push esi
push str._sMicrosoftWindowsStart_MenuProgramsStartup
jmp 0x43b30c
test ecx, ecx
jne 0x43b2dd
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x30
push str.ALLUSERSPROFILE
lea esi, [ebp - 0x14]
call fcn.0042dad0
mov ecx, esi
call fcn.0045a240
mov esi, dword [ebp - 0x14]
push esi
push str._sStart_MenuProgramsStartup
lea eax, [ebp - 0x30]
push eax
call fcn.00430100
add esp, 0x10
mov byte [ebp - 4], 0x2a
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b367
mov ecx, dword [esi]
push esi
jmp 0x43b362
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x14]
call fcn.0045ad80
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x31
call fcn.0042eb20
mov byte [ebp - 4], 0x2a
or eax, 0xffffffff
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b367
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x18]
push ebx
push edi
push str._s_s.lnk
push eax
call fcn.00430100
mov esi, dword [ebp - 0x18]
add esp, 0x10
push esi
push str.CDispatcherHandler::CreateShortcut
push str._s_Shortcut_link___s_
push 0
push 5
call fcn.00458800
add esp, 0x14
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x55], 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, 1
cmp eax, 0xffffffff
je 0x43b3c1
test al, 0x10
mov eax, dword [ebp - 0x5c]
movzx eax, al
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x2c]
call fcn.00456c40
movzx ecx, byte [ebp - 0x55]
test al, al
mov eax, 1
mov dword [ebp - 0x34], 0
cmovne ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x32
push eax
push 0x48b640
push 0x17
push 0
push 0x48b660
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edx, eax
test edx, edx
js 0x43bd3d
mov eax, dword [ebp - 0x34]
push dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
jns 0x43b538
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetPath__d__d__s__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43b468
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b486
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b4a1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43b4bc
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b4da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b4f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b516
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x1c]
test eax, eax
jns 0x43b66a
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x3c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetDescription__d__d__s__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43b59a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b5b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b5d3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43b5ee
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b60c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b62a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b648
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
push 0
cmp dword [ecx - 0xc], 0
jne 0x43b7aa
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
test eax, eax
jns 0x43b8d9
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetIconLocation_Exec__d__d__s__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43b6da
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b6f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b713
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43b72e
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b74c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b76a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b788
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x44]
mov edx, eax
test edx, edx
jns 0x43b8d9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push edx
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetIconLocation_Icon__d__d__s__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43b809
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b827
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b842
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43b85d
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b87b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b899
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b8b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov ecx, dword [ebp - 0x40]
cmp dword [ecx - 0xc], 0
je 0x43ba18
mov eax, dword [ebp - 0x34]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
test edx, edx
jns 0x43ba18
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push edx
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetArguments__d__d__s__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43b948
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b966
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43b981
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43b99c
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b9ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b9d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43b9f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x34]
push edx
push 0x48b630
push eax
mov ecx, dword [eax]
call dword [ecx]
mov edx, eax
test edx, edx
js 0x43bc15
mov eax, dword [ebp - 0x14]
push 1
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jns 0x43bb05
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_Save__d__d__d__d
push eax
call fcn.00430100
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.0042f1b0
add eax, 0x10
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x34
push eax
mov edx, 0x498a3c
lea ecx, [ebp - 0x48]
call fcn.0042d220
add esp, 0x1c
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x20]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042ea50
mov byte [ebp - 4], 0x34
or eax, 0xffffffff
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bacc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x20]
push esi
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
add esp, 0x14
mov byte [ebp - 4], 0x33
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43bb02
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x18]
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x43bb16
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x54]
call fcn.0042eb20
push 0x49a5b4
push 0x49934c
lea ecx, [ebp - 0x54]
call fcn.0042d680
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43bb45
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bb63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43bb7e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43bb99
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bbb7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bbd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bbf3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov ecx, dword [ebp - 0x20]
movzx eax, cl
mov ecx, dword [ebp - 0x5c]
push eax
movzx eax, cl
push eax
push edx
lea eax, [ebp - 0x28]
push str.createShortcut_QueryInterface__d__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x32
add esp, 0x28
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x43bc5c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43bc6d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bc8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43bca6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43bcc1
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bcdf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bcfd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bd1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
mov ecx, dword [ebp - 0x20]
movzx eax, cl
mov ecx, dword [ebp - 0x5c]
push eax
movzx eax, cl
push eax
push edx
lea eax, [ebp - 0x28]
push str.createShortcut_CoCreateInstance__d__d__d
push eax
call fcn.00430100
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.00458800
mov byte [ebp - 4], 0x2a
add esp, 0x28
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43bd84
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bda2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43bdbd
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43bdd8
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bdf6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43be14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43be32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
push 0x1b
push str.createShortcut_name_missing
lea ecx, [ebp - 0x28]
call fcn.0042f2f0
push str.CDispatcherHandler::CreateShortcut
push str._s_name_error
push 3
push 5
call fcn.00458800
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43be97
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43beb2
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bed0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43beee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
push 0x1b
push str.createShortcut_type_missing
lea ecx, [ebp - 0x28]
call fcn.0042f2f0
push str.CDispatcherHandler::CreateShortcut
push str._s_type_error
push 3
push 5
call fcn.00458800
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bf53
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43bf6e
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bf8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bfaa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [edx]
push edx
jmp 0x43c07c
push 0x1f
push str.createShortcut_filePath_missing
lea ecx, [ebp - 0x28]
call fcn.0042f2f0
push str.CDispatcherHandler::CreateShortcut
push str._s_filePath_error
push 3
push 5
call fcn.00458800
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c00f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43c02a
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c048
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c066
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43c081
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x43c12e
mov eax, 8
mov word [ebx], ax
call fcn.0040f7b0
mov ecx, eax
test ecx, ecx
jne 0x43c0a9
push 0x80004005
call fcn.00420020
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x36
mov edx, 0x49a274
mov eax, dword [ebp - 0x28]
mov ecx, 0x49a268
mov edi, dword [ebp - 0x54]
push eax
cmp dword [eax - 0xc], 0
lea eax, [ebp - 0x14]
cmovne ecx, edx
push ecx
push edi
push str.__path__:___s_____result__:__s____error__:___s_
push eax
call fcn.00430100
add esp, 0x14
lea ecx, [ebp - 0x14]
push 0x49a5b4
push 0x49934c
call fcn.0042d680
mov esi, dword [ebp - 0x14]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x43c10b
call fcn.0042f1a0
mov dword [ebx + 8], eax
add esi, 0xfffffff0
or ebx, 0xffffffff
mov byte [ebp - 4], 2
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x43c134
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x43c134
mov edi, dword [ebp - 0x54]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c152
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x43c16d
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x43c18c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045daaf
mov esp, ebp
pop ebp
ret 8