Function at 0x40aff0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42473e
mov eax, dword fs:[0]
push eax
sub esp, 0x93c
mov eax, dword [0x434014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x208
lea eax, [ebp - 0x628]
mov dword [ebp - 0x930], 0
push 0
push eax
call fcn.0040fea0
add esp, 0xc
lea eax, [ebp - 0x628]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x628]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b060
sub ecx, edx
mov dword [ebp - 0x92c], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x92c], ax
lea eax, [ebp - 0x628]
push ecx
push eax
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
lea eax, [ebp - 0x848]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x92c]
call fcn.00407640
push eax
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 1
call fcn.00403ca0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x834]
cmp edx, 8
jb 0x40b116
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b10c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce67
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x918]
cmp edx, 8
jb 0x40b177
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b16d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce67
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x91c], 0
lea ecx, [ebp - 0x880]
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
call fcn.0040a510
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 5
push ecx
mov ecx, eax
call fcn.00407640
push eax
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 6
call fcn.00403ca0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x884]
cmp edx, 8
jb 0x40b205
mov ecx, dword [ebp - 0x898]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b1fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce6c
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x888], 0
mov dword [ebp - 0x884], 7
mov word [ebp - 0x898], ax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x86c]
cmp edx, 8
jb 0x40b266
mov ecx, dword [ebp - 0x880]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b25c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce6c
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x870], 0
cmp dword [edi + 0x14], 8
mov word [ebp - 0x880], ax
mov eax, edi
mov dword [ebp - 0x86c], 7
jb 0x40b28d
mov eax, dword [edi]
push dword [edi + 0x10]
xor ecx, ecx
mov dword [ebp - 0x948], 0
mov word [ebp - 0x948], cx
lea ecx, [ebp - 0x948]
push eax
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
call fcn.00404100
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x948]
call fcn.00407640
push str.FlashHelper
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00409910
push eax
lea ecx, [ebp - 0x868]
call fcn.00403ca0
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x834]
cmp edx, 8
jb 0x40b339
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b32f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce71
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40b39a
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b390
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce71
push edx
push ecx
call fcn.0040e74a
add esp, 8
mov ecx, dword [ebp - 0x8b8]
lea ebx, [ebp - 0x8c8]
xor eax, eax
mov dword [ebp - 0x938], 0
cmp dword [ebp - 0x8cc], 8
mov word [ebp - 0x948], ax
lea eax, [ebp - 0x8e0]
cmovae eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0x8b4], 8
mov dword [ebp - 0x934], 7
cmovae ebx, dword [ebp - 0x8c8]
cmp ecx, dword [ebp - 0x8d0]
jne 0x40ce2a
test ecx, ecx
je 0x40b42a
movzx edx, word [ebx]
movzx esi, word [eax]
cmp dx, si
jb 0x40ce2a
sub ebx, eax
cmp dx, si
ja 0x40ce2a
cmp ecx, 1
je 0x40b42a
movzx edx, word [eax + ebx + 2]
add eax, 2
dec ecx
movzx esi, word [eax]
cmp dx, si
jae 0x40b409
jmp 0x40ce2a
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x40b434
mov eax, dword [edi]
cmp dword [ebp - 0x854], 8
lea ebx, [ebp - 0x868]
mov ecx, dword [ebp - 0x858]
cmovae ebx, dword [ebp - 0x868]
cmp ecx, dword [edi + 0x10]
jne 0x40b48d
test ecx, ecx
je 0x40ce2a
movzx edx, word [ebx]
movzx esi, word [eax]
cmp dx, si
jb 0x40b487
sub ebx, eax
cmp dx, si
ja 0x40b487
cmp ecx, 1
je 0x40ce2a
movzx edx, word [eax + ebx + 2]
add eax, 2
dec ecx
movzx esi, word [eax]
cmp dx, si
jae 0x40b46b
mov ecx, dword [ebp - 0x858]
cmp dword [ebp - 0x854], 8
lea eax, [ebp - 0x868]
push ecx
cmovae eax, dword [ebp - 0x868]
lea ecx, [ebp - 0x914]
xor edx, edx
mov dword [ebp - 0x914], 0
push eax
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], dx
call fcn.00404100
mov byte [ebp - 4], 0xf
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x40b4e3
mov eax, dword [edi]
push dword [edi + 0x10]
xor ecx, ecx
mov dword [ebp - 0x92c], 0
mov word [ebp - 0x92c], cx
lea ecx, [ebp - 0x92c]
push eax
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x914]
cmp dword [ebp - 0x900], 8
lea eax, [ebp - 0x92c]
cmovae ecx, dword [ebp - 0x914]
cmp dword [ebp - 0x918], 8
push ecx
cmovae eax, dword [ebp - 0x92c]
push eax
call fcn.0040d72e
test eax, eax
jne 0x40ce76
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x918]
cmp edx, 8
jb 0x40b598
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b58e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce8b
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40b5f9
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b5ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce8b
push edx
push ecx
call fcn.0040e74a
add esp, 8
lea eax, [ebp - 0x868]
cmp edi, eax
je 0x40b61f
cmp dword [ebp - 0x854], 8
mov ecx, edi
push dword [ebp - 0x858]
cmovae eax, dword [ebp - 0x868]
push eax
call fcn.00404100
cmp dword [ebp - 0x854], 8
lea eax, [ebp - 0x868]
push dword [ebp - 0x858]
cmovae eax, dword [ebp - 0x868]
xor ecx, ecx
mov dword [ebp - 0x914], 0
mov word [ebp - 0x914], cx
lea ecx, [ebp - 0x914]
push eax
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
call fcn.00404100
push ecx
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x11
call fcn.00404720
push eax
lea ecx, [ebp - 0x880]
call fcn.00403ca0
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x900]
cmp edx, 8
jb 0x40b6cc
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b6c2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce90
push edx
push ecx
call fcn.0040e74a
add esp, 8
push dword [ebp - 0x858]
xor eax, eax
mov dword [ebp - 0x948], 0
cmp dword [ebp - 0x854], 8
mov word [ebp - 0x914], ax
lea eax, [ebp - 0x868]
cmovae eax, dword [ebp - 0x868]
xor ecx, ecx
mov word [ebp - 0x948], cx
lea ecx, [ebp - 0x948]
push eax
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
call fcn.00404100
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x914]
push 0x18
xor eax, eax
mov dword [ebp - 0x914], 0
push str.FlashAssistantUninst.exe
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
lea eax, [ebp - 0x914]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x948]
call fcn.00401e00
mov byte [ebp - 4], 0x14
mov esi, eax
mov edx, dword [ebp - 0x900]
cmp edx, 8
jb 0x40b7cf
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b7c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce95
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x904], 0
push esi
lea ecx, [ebp - 0x8b0]
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00403ca0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40b83c
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b832
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce9a
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x938], 0
cmp dword [ebp - 0x86c], 8
lea edx, [ebp - 0x880]
mov dword [ebp - 0x848], eax
cmovae edx, dword [ebp - 0x880]
mov ecx, edx
mov dword [ebp - 0x934], 7
mov word [ebp - 0x948], ax
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40b890
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x848]
call fcn.00404100
xor eax, eax
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x914], 0
lea ecx, [ebp - 0x914]
push 0x42f83c
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x92c]
push 0x46
push str.SoftwareMicrosoftWindowsCurrentVersionApp_PathsFlashAssistant.exe
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x914]
push eax
lea edx, [ebp - 0x92c]
call fcn.004093f0
mov edx, dword [ebp - 0x918]
add esp, 8
cmp edx, 8
jb 0x40b978
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b96e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce9f
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40b9d9
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b9cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce9f
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
cmp edx, 8
jb 0x40ba3a
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ba30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ce9f
push edx
push ecx
call fcn.0040e74a
add esp, 8
cmp dword [ebp - 0x89c], 8
lea edx, [ebp - 0x8b0]
mov dword [ebp - 0x848], 0
cmovae edx, dword [ebp - 0x8b0]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ba80
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x848]
call fcn.00404100
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x914]
push 0xf
xor eax, eax
mov dword [ebp - 0x914], 0
push str.UninstallString
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x92c]
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallFlashAssistant
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x914]
push eax
lea edx, [ebp - 0x92c]
call fcn.004093f0
mov edx, dword [ebp - 0x918]
add esp, 8
cmp edx, 8
jb 0x40bb69
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bb5f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea4
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40bbca
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bbc0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea4
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
cmp edx, 8
jb 0x40bc2b
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bc21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea4
push edx
push ecx
call fcn.0040e74a
add esp, 8
cmp dword [ebp - 0x86c], 8
lea edx, [ebp - 0x880]
mov dword [ebp - 0x848], 0
cmovae edx, dword [ebp - 0x880]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40bc70
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x848]
call fcn.00404100
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x914]
push 0xb
xor eax, eax
mov dword [ebp - 0x914], 0
push str.DisplayIcon
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x92c]
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallFlashAssistant
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x914]
push eax
lea edx, [ebp - 0x92c]
call fcn.004093f0
mov edx, dword [ebp - 0x918]
add esp, 8
cmp edx, 8
jb 0x40bd59
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bd4f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea9
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40bdba
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bdb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea9
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
cmp edx, 8
jb 0x40be1b
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40be11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cea9
push edx
push ecx
call fcn.0040e74a
add esp, 8
push 0xc
xor eax, eax
mov dword [ebp - 0x848], 0
push 0x430030
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
call fcn.00404100
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x914]
push 0xb
xor eax, eax
mov dword [ebp - 0x914], 0
push str.DisplayName
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x92c]
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionUninstallFlashAssistant
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x914]
push eax
lea edx, [ebp - 0x92c]
call fcn.004093f0
mov edx, dword [ebp - 0x918]
add esp, 8
cmp edx, 8
jb 0x40bf21
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceae
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40bf82
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bf78
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceae
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
cmp edx, 8
jb 0x40bfe3
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40bfd9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceae
push edx
push ecx
call fcn.0040e74a
add esp, 8
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0040fea0
mov edi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
add esp, 0xc
push 0
push 0x19
push eax
push 0
call edi
xor eax, eax
mov dword [ebp - 0x848], 0
push eax
push 0x42f83c
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
call fcn.00404100
lea ecx, [ebp - 0x420]
mov byte [ebp - 4], 0x20
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c053
sub ecx, edx
mov dword [ebp - 0x914], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x914], ax
lea eax, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0x914]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
call fcn.00404100
push 0x430064
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x21
call fcn.00409910
push eax
lea ecx, [ebp - 0x92c]
call fcn.00403ca0
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x22
push eax
lea edx, [ebp - 0x880]
lea ecx, [ebp - 0x92c]
call fcn.00409490
mov byte [ebp - 4], 0x21
add esp, 4
mov edx, dword [ebp - 0x918]
cmp edx, 8
jb 0x40c11f
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c115
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceb3
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40c180
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c176
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceb3
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
cmp edx, 8
jb 0x40c1e1
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c1d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceb3
push edx
push ecx
call fcn.0040e74a
add esp, 8
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c1f0
sub ecx, edx
mov dword [ebp - 0x914], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x914], ax
lea eax, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0x914]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
call fcn.00404100
push ecx
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x23
call fcn.0040cf70
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x40c253
mov eax, dword [esi]
push eax
call fcn.0040d673
mov dword [ebp - 0x850], eax
test edx, edx
jne 0x40ceb8
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x900]
cmp edx, 8
jb 0x40c2ab
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c2a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cec3
push edx
push ecx
call fcn.0040e74a
add esp, 8
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0040fea0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x17
push eax
push 0
call edi
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c2e0
sub ecx, edx
mov dword [ebp - 0x914], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x914], ax
lea eax, [ebp - 0x218]
push ecx
push eax
lea ecx, [ebp - 0x914]
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
call fcn.00404100
push 0x4300a4
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x24
call fcn.00409910
push eax
lea ecx, [ebp - 0x898]
call fcn.00403ca0
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x900]
cmp edx, 8
jb 0x40c38d
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c383
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cec8
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x904], 0
cmp dword [ebp - 0x884], 8
mov word [ebp - 0x914], ax
lea eax, [ebp - 0x898]
cmovae eax, dword [ebp - 0x898]
push eax
mov dword [ebp - 0x900], 7
call fcn.0040d2d9
mov dword [ebp - 0x850], eax
test edx, edx
jne 0x40cecd
xor eax, eax
mov dword [ebp - 0x848], edx
push eax
push 0x42f83c
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x838], edx
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
call fcn.00404100
lea eax, [ebp - 0x898]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x92c]
call fcn.00403ca0
push 0x430064
lea ecx, [ebp - 0x92c]
mov byte [ebp - 4], 0x28
call fcn.00409910
push eax
lea ecx, [ebp - 0x948]
call fcn.00403ca0
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x29
push eax
lea edx, [ebp - 0x880]
lea ecx, [ebp - 0x948]
call fcn.00409490
mov byte [ebp - 4], 0x28
add esp, 4
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40c49b
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c491
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cede
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
mov word [ebp - 0x948], ax
cmp edx, 8
jb 0x40c4fc
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c4f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cede
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40c55d
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c553
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cede
push edx
push ecx
call fcn.0040e74a
add esp, 8
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c566
sub ecx, edx
mov dword [ebp - 0x92c], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x92c], ax
lea eax, [ebp - 0x218]
push ecx
push eax
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
call fcn.00404100
push ecx
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x92c]
mov ebx, 0xfffffff1
mov dword [ebp - 0x930], ebx
call fcn.0040d030
mov esi, eax
mov dword [ebp - 0x948], 0
push 0x19
xor eax, eax
mov dword [ebp - 0x938], 0
push str.Flash_AssistantUninst.lnk
lea ecx, [ebp - 0x948]
mov dword [ebp - 0x934], 7
mov word [ebp - 0x948], ax
call fcn.00404100
lea eax, [ebp - 0x948]
mov dword [ebp - 4], 0x2b
push eax
mov ecx, esi
call fcn.00401e00
mov byte [ebp - 4], 0x2a
mov esi, eax
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40c660
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c656
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cee3
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x938], 0
mov ecx, esi
mov dword [ebp - 0x934], 7
mov word [ebp - 0x948], ax
call fcn.0040a430
test al, al
jne 0x40c6ca
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0x848]
call fcn.00403ca0
push ecx
mov dword [ebp - 4], 0x2c
lea ecx, [ebp - 0x848]
mov ebx, 0xfffffff3
mov dword [ebp - 0x930], ebx
call fcn.0040d0f0
mov ecx, eax
call fcn.0040a430
mov byte [ebp - 0x8f9], 0
test al, al
je 0x40c6d1
mov byte [ebp - 0x8f9], 1
mov dword [ebp - 4], 0x2a
test bl, 2
je 0x40c73d
mov edx, dword [ebp - 0x834]
and ebx, 0xfffffffd
cmp edx, 8
jb 0x40c720
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c716
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cee8
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
mov dword [ebp - 4], 0x26
test bl, 1
je 0x40c78c
mov edx, dword [ebp - 0x918]
and ebx, 0xfffffffe
cmp edx, 8
jb 0x40c78c
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c782
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cee8
push edx
push ecx
call fcn.0040e74a
add esp, 8
cmp byte [ebp - 0x8f9], 0
je 0x40c928
xor eax, eax
mov dword [ebp - 0x848], 0
push eax
push 0x42f83c
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x838], 0
mov dword [ebp - 0x834], 7
mov word [ebp - 0x848], ax
call fcn.00404100
lea eax, [ebp - 0x898]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x92c]
call fcn.00403ca0
push ecx
lea ecx, [ebp - 0x92c]
mov byte [ebp - 4], 0x2e
call fcn.0040d0f0
push eax
lea ecx, [ebp - 0x948]
call fcn.00403ca0
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x2f
push eax
lea edx, [ebp - 0x8b0]
lea ecx, [ebp - 0x948]
call fcn.00409490
mov byte [ebp - 4], 0x2e
add esp, 4
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40c866
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c85c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceed
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
mov word [ebp - 0x948], ax
cmp edx, 8
jb 0x40c8c7
mov ecx, dword [ebp - 0x92c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c8bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceed
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x918], 7
mov word [ebp - 0x92c], ax
cmp edx, 8
jb 0x40c928
mov ecx, dword [ebp - 0x848]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c91e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ceed
push edx
push ecx
call fcn.0040e74a
add esp, 8
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40c931
sub ecx, edx
mov dword [ebp - 0x948], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x948], ax
lea eax, [ebp - 0x218]
push ecx
push eax
lea ecx, [ebp - 0x948]
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
call fcn.00404100
push ecx
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 0x30
call fcn.0040d030
mov ecx, eax
call fcn.00402fd0
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x934]
cmp edx, 8
jb 0x40c9d5
mov ecx, dword [ebp - 0x948]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40c9cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cef2
push edx
push ecx
call fcn.0040e74a
add esp, 8
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.0040fea0
add esp, 0xc
lea eax, [ebp - 0x830]
push 0
push 0x1a
push eax
push 0
call edi
lea ecx, [ebp - 0x830]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ca03
sub ecx, edx
mov dword [ebp - 0x948], 0
xor eax, eax
sar ecx, 1
mov word [ebp - 0x948], ax
lea eax, [ebp - 0x830]
push ecx
push eax
lea ecx, [ebp - 0x948]
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x934], 7
call fcn.00404100
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x914]
push 9
xor eax, eax
mov dword [ebp - 0x914], 0
push str.Microsoft
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x900], 7
mov word [ebp - 0x914], ax
call fcn.00404100
lea eax, [ebp - 0x914]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x948]
call fcn.00401e00
mov byte [ebp - 4], 0x31
mov esi, eax
mov edx, dword [ebp - 0x900]
cmp edx, 8
jb 0x40cae5
mov ecx, dword [ebp - 0x914]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40cadb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40cef7
push edx
push ecx
call fcn.0040e74a
add esp, 8
xor eax, eax
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x848], eax
lea ecx, [ebp - 0x848]
mov word [ebp - 0x914], ax
mov dword [ebp - 0x838], eax
mov word [ebp - 0x848], ax
lea eax, [ebp - 0x850]
push eax
mov dword [ebp - 0x900], 7
mov dword [ebp - 0x850], str.Internet_Explorer
mov dword [ebp - 0x84c], 0x11
mov dword [ebp - 0x834], 7
call fcn.00404f60
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x33
push eax
mov ecx, esi
call fcn.00401e00
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0x31
mov esi, eax
call fcn.00402090
push str.Quick_Launch
mov ecx, esi
call fcn.00409910
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00403ca0
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 0x35
call fcn.00402090
push 0x42f83c
lea ecx, [ebp - 0x92c]
call fcn.00403c50
lea eax, [ebp - 0x8f8]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x914]
call fcn.00403ca0
push 0x430064
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x37
call fcn.00409910
push eax
lea ecx, [ebp - 0x848]
call fcn.00403ca0
lea eax, [ebp - 0x92c]
mov byte [ebp - 4], 0x38
push eax
lea edx, [ebp - 0x880]
lea ecx, [ebp - 0x848]
call fcn.00409490
add esp, 4
lea ecx, [ebp - 0x848]
call fcn.00402090
lea ecx, [ebp - 0x914]
call fcn.00402090
lea ecx, [ebp - 0x92c]
mov byte [ebp - 4], 0x35
call fcn.00402090
lea eax, [ebp - 0x8f8]
push eax
lea ecx, [ebp - 0x848]
call fcn.00403ca0
push ecx
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0x39
call fcn.0040cf70
mov ecx, eax
call fcn.0040a4e0
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0x35
call fcn.00402090
push str.User_Pinned
lea ecx, [ebp - 0x8f8]
call fcn.00409910
push str.TaskBar
mov ecx, eax
call fcn.00409910
push eax
lea ecx, [ebp - 0x848]
call fcn.00403ca0
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x948]
call fcn.00403ca0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x948]
or ebx, 4
push 0x430064
mov dword [ebp - 0x930], ebx
call fcn.00409910
mov ecx, eax
call fcn.0040a430
test al, al
jne 0x40ccf7
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x914]
call fcn.00403ca0
push ecx
mov dword [ebp - 4], 0x3c
lea ecx, [ebp - 0x914]
or ebx, 8
mov dword [ebp - 0x930], ebx
call fcn.0040cf70
mov ecx, eax
call fcn.0040a430
mov byte [ebp - 0x8f9], 0
test al, al
je 0x40ccfe
mov byte [ebp - 0x8f9], 1
test bl, 8
je 0x40cd11
lea ecx, [ebp - 0x914]
and ebx, 0xfffffff7
call fcn.00402090
mov dword [ebp - 4], 0x3a
test bl, 4
je 0x40cd28
lea ecx, [ebp - 0x948]
call fcn.00402090
cmp byte [ebp - 0x8f9], 0
je 0x40cdf3
push 0x42f83c
lea ecx, [ebp - 0x92c]
call fcn.00403c50
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x948]
call fcn.00403ca0
push 0x430064
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 0x3e
call fcn.00409910
push eax
lea ecx, [ebp - 0x914]
call fcn.00403ca0
lea eax, [ebp - 0x92c]
mov byte [ebp - 4], 0x3f
push eax
lea edx, [ebp - 0x880]
lea ecx, [ebp - 0x914]
call fcn.00409490
add esp, 4
lea ecx, [ebp - 0x914]
call fcn.00402090
lea ecx, [ebp - 0x948]
call fcn.00402090
lea ecx, [ebp - 0x92c]
mov byte [ebp - 4], 0x3a
call fcn.00402090
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x914]
call fcn.00403ca0
push ecx
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x40
call fcn.0040cf70
mov ecx, eax
call fcn.0040a4e0
lea ecx, [ebp - 0x914]
call fcn.00402090
lea ecx, [ebp - 0x848]
call fcn.00402090
lea ecx, [ebp - 0x8f8]
call fcn.00402090
lea ecx, [ebp - 0x898]
call fcn.00402090
lea ecx, [ebp - 0x8b0]
call fcn.00402090
lea ecx, [ebp - 0x880]
call fcn.00402090
lea ecx, [ebp - 0x868]
call fcn.00402090
lea ecx, [ebp - 0x8c8]
call fcn.00402090
lea ecx, [ebp - 0x8e0]
call fcn.00402090
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040e3a6
mov esp, ebp
pop ebp
ret
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
lea ecx, [ebp - 0x914]
mov edx, eax
push ecx
lea ecx, [ebp - 0x92c]
push ecx
call fcn.0040a3a0
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
push esi
mov ecx, str.remove
call fcn.0040a310
call fcn.0041260f
call fcn.0041260f
lea eax, [ebp - 0x898]
mov ecx, str.create_directory
push eax
call fcn.0040a310
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
call fcn.0041260f
int3