Function at 0x402cf0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x45e2f8
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push esi
mov eax, dword [0x491104]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
push str.StartCenterU.exe
lea eax, [esp + 0x20]
push edi
push eax
call fcn.00406150
add esp, 0xc
mov dword [esp + 0x50], 0
lea ecx, [esp + 0x40]
push ecx
call fcn.0040e4c0
mov byte [esp + 0x50], 1
push str.shortcut_description
lea ecx, [esp + 0x18]
call fcn.00406e00
mov byte [esp + 0x50], 2
push str.shortcut_name
lea ecx, [esp + 0x1c]
call fcn.00406e00
mov bl, 3
mov byte [esp + 0x50], bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4698d0
call fcn.00406e00
mov byte [esp + 0x58], 4
push ecx
mov edx, esp
lea eax, [esp + 0x20]
mov dword [esp + 0x2c], esp
push eax
push edx
call fcn.004160f0
add esp, 8
mov byte [esp + 0x5c], 5
push 0x19
push ecx
mov ecx, esp
lea edx, [esp + 0x2c]
mov dword [esp + 0x3c], esp
push edx
push ecx
call fcn.004160f0
mov byte [esp + 0x6c], 6
add esp, 4
mov ecx, esp
mov dword [esp + 0x44], esp
push edi
call fcn.00406730
mov byte [esp + 0x68], 7
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
call fcn.00406730
mov byte [esp + 0x6c], 8
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x70], bl
call fcn.0040e5a0
mov byte [esp + 0x50], 2
lea ecx, [esp + 0x18]
call fcn.00406ed0
mov byte [esp + 0x50], 1
lea ecx, [esp + 0x14]
call fcn.00406ed0
lea ecx, [esp + 0x10]
call fcn.00406fc0
mov byte [esp + 0x50], 9
lea esi, [esp + 0x10]
mov ecx, 0x17
call fcn.0040f200
test eax, eax
je 0x403179
push 6
push str.Klaes_
mov ecx, esi
call fcn.00406510
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x402e5a
push eax
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x403179
push str.shortcut_description
lea ecx, [esp + 0x28]
call fcn.00406e00
mov byte [esp + 0x50], 0xa
push str.shortcut_name
lea ecx, [esp + 0x24]
call fcn.00406e00
mov bl, 0xb
mov byte [esp + 0x50], bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x4698d0
call fcn.00406e00
mov byte [esp + 0x58], 0xc
push ecx
mov ecx, esp
lea edx, [esp + 0x30]
mov dword [esp + 0x38], esp
push edx
push ecx
call fcn.004160f0
mov byte [esp + 0x64], 0xd
add esp, 4
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.00406730
mov byte [esp + 0x60], 0xe
push ecx
mov ecx, esp
lea edx, [esp + 0x34]
mov dword [esp + 0x48], esp
push edx
push ecx
call fcn.004160f0
mov byte [esp + 0x6c], 0xf
add esp, 4
mov ecx, esp
mov dword [esp + 0x50], esp
push edi
call fcn.00406730
mov byte [esp + 0x68], 0x10
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.00406730
mov byte [esp + 0x6c], 0x11
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x70], bl
call fcn.0040e760
mov byte [esp + 0x50], 0xa
lea ecx, [esp + 0x20]
call fcn.00406ed0
mov byte [esp + 0x50], 9
lea ecx, [esp + 0x24]
call fcn.00406ed0
push str.INSTALLKLAESPreRequisites_
lea edx, [esp + 0x18]
push edi
push edx
call fcn.00406150
add esp, 0xc
mov byte [esp + 0x50], 0x12
push 0x468bb4
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00406150
add esp, 0xc
mov bl, 0x13
mov byte [esp + 0x50], bl
push str.shortcut_prerequisites_description
lea ecx, [esp + 0x24]
call fcn.00406e00
mov byte [esp + 0x50], 0x14
push str.shortcut_prerequisites_name
lea ecx, [esp + 0x28]
call fcn.00406e00
mov byte [esp + 0x50], 0x15
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x4698d0
call fcn.00406e00
mov byte [esp + 0x58], 0x16
push ecx
mov edx, esp
lea eax, [esp + 0x2c]
mov dword [esp + 0x44], esp
push eax
push edx
call fcn.004160f0
mov byte [esp + 0x64], 0x17
add esp, 4
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.00406730
mov byte [esp + 0x60], 0x18
push ecx
mov eax, esp
lea ecx, [esp + 0x38]
mov dword [esp + 0x44], esp
push ecx
push eax
call fcn.004160f0
mov byte [esp + 0x6c], 0x19
add esp, 4
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.00406730
mov byte [esp + 0x68], 0x1a
push ecx
lea eax, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00406730
mov byte [esp + 0x6c], 0x1b
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x70], 0x15
call fcn.0040e760
mov byte [esp + 0x50], 0x14
lea ecx, [esp + 0x24]
call fcn.00406ed0
mov byte [esp + 0x50], bl
lea ecx, [esp + 0x20]
call fcn.00406ed0
push edi
lea ecx, [esp + 0x18]
call fcn.00406800
push str.KLAESSupport.exe
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.00406150
add esp, 0xc
mov byte [esp + 0x50], 0x1c
push eax
lea ecx, [esp + 0x1c]
call fcn.00406800
mov byte [esp + 0x50], bl
lea ecx, [esp + 0x24]
call fcn.00406ed0
push str.shortcut_klaessupport_description
lea ecx, [esp + 0x24]
call fcn.00406e00
mov byte [esp + 0x50], 0x1d
push str.shortcut_klaessupport_name
lea ecx, [esp + 0x28]
call fcn.00406e00
mov byte [esp + 0x50], 0x1e
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x4698d0
call fcn.00406e00
mov byte [esp + 0x58], 0x1f
push ecx
mov ecx, esp
lea edx, [esp + 0x2c]
mov dword [esp + 0x44], esp
push edx
push ecx
call fcn.004160f0
mov byte [esp + 0x64], 0x20
add esp, 4
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00406730
mov byte [esp + 0x60], 0x21
push ecx
mov ecx, esp
lea edx, [esp + 0x38]
mov dword [esp + 0x44], esp
push edx
push ecx
call fcn.004160f0
mov byte [esp + 0x6c], 0x22
add esp, 4
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00406730
mov byte [esp + 0x68], 0x23
push ecx
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.00406730
mov byte [esp + 0x6c], 0x24
lea eax, [esp + 0x5c]
push eax
mov byte [esp + 0x70], 0x1e
call fcn.0040e760
mov byte [esp + 0x50], 0x1d
lea ecx, [esp + 0x24]
call fcn.00406ed0
mov byte [esp + 0x50], bl
lea ecx, [esp + 0x20]
call fcn.00406ed0
mov byte [esp + 0x50], 0x12
lea ecx, [esp + 0x18]
call fcn.00406ed0
mov byte [esp + 0x50], 9
lea ecx, [esp + 0x14]
call fcn.00406ed0
mov byte [esp + 0x50], 1
lea ecx, [esp + 0x10]
call fcn.00406ed0
mov byte [esp + 0x50], 0
lea ecx, [esp + 0x40]
call fcn.0040e550
mov dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.00406ed0
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x48
ret