Function at 0x425000
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x466d4c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xaf0
mov dword [ebp - 0x934], ecx
mov ecx, dword [ebp - 0x934]
call fcn.004280d0
push 0x47fe44
lea ecx, [ebp - 0x10]
call fcn.0040204e
mov dword [ebp - 4], 0
push 0x47fe44
lea ecx, [ebp - 0x18]
call fcn.0040204e
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], 0x104
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x934]
add ecx, 0x30
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x4250bb
mov edx, dword [ebp - 0x934]
add edx, 0x30
mov dword [ebp - 0x230], edx
jne 0x425090
mov dword [ebp - 0x22c], 0
jmp 0x4250a5
mov eax, dword [ebp - 0x230]
push eax
call fcn.00449260
add esp, 4
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
lea ecx, [ebp - 0x18]
call fcn.00403cc5
push 0x30
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x938]
mov dword [ebp - 0x234], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x234]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1c]
sub eax, 0x10
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x24]
call fcn.00409a7c
mov dword [ebp - 0x93c], eax
mov ecx, dword [ebp - 0x93c]
mov dword [ebp - 0x254], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x250], edx
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp - 0x254]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1d], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
sub ecx, 0x10
mov dword [ebp - 0x258], ecx
mov ecx, dword [ebp - 0x258]
call fcn.00401741
movzx edx, byte [ebp - 0x1d]
test edx, edx
je 0x4251d1
mov eax, str.C:TEMP_
test eax, eax
jne 0x425199
mov dword [ebp - 0x25c], 0
jmp 0x4251ac
push str.C:TEMP_
call fcn.00449260
add esp, 4
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
push ecx
push str.C:TEMP_
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_ADMINTOOLS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1d
lea ecx, [ebp - 0x28]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x940], eax
mov edx, dword [ebp - 0x940]
mov dword [ebp - 0x29c], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x28]
sub ecx, 0x10
mov dword [ebp - 0x2a0], ecx
mov ecx, dword [ebp - 0x2a0]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x30]
call fcn.00409a7c
mov dword [ebp - 0x944], eax
mov edx, dword [ebp - 0x944]
mov dword [ebp - 0x2bc], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
push ecx
mov ecx, dword [ebp - 0x2bc]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x29], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x30]
sub edx, 0x10
mov dword [ebp - 0x2c0], edx
mov ecx, dword [ebp - 0x2c0]
call fcn.00401741
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x4252fb
mov ecx, str.C:Documents_and_Settings_USER_Start_MenuProgramsStartup
test ecx, ecx
jne 0x4252c3
mov dword [ebp - 0x2c4], 0
jmp 0x4252d6
push str.C:Documents_and_Settings_USER_Start_MenuProgramsStartup
call fcn.00449260
add esp, 4
mov dword [ebp - 0x2c4], eax
mov edx, dword [ebp - 0x2c4]
push edx
push str.C:Documents_and_Settings_USER_Start_MenuProgramsStartup
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_ALTSTARTUP
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1a
lea edx, [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x304]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x34]
sub edx, 0x10
mov dword [ebp - 0x308], edx
mov ecx, dword [ebp - 0x308]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x3c]
call fcn.00409a7c
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x324], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x320]
push edx
mov ecx, dword [ebp - 0x324]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x35], al
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x3c]
sub eax, 0x10
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
call fcn.00401741
movzx ecx, byte [ebp - 0x35]
test ecx, ecx
je 0x425425
mov edx, str.C:Documents_and_Settings_USER_Application_Data
test edx, edx
jne 0x4253ed
mov dword [ebp - 0x32c], 0
jmp 0x425400
push str.C:Documents_and_Settings_USER_Application_Data
call fcn.00449260
add esp, 4
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
push eax
push str.C:Documents_and_Settings_USER_Application_Data
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov ecx, dword [ebp - 0x18]
push ecx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov edx, dword [ebp - 0x10]
push edx
push str.PATH_APPDATA
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x2f
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp - 0x950]
mov dword [ebp - 0x36c], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x36c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x40]
sub eax, 0x10
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x370]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x48]
call fcn.00409a7c
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x38c], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x388], edx
mov eax, dword [ebp - 0x388]
push eax
mov ecx, dword [ebp - 0x38c]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x41], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x48]
sub ecx, 0x10
mov dword [ebp - 0x390], ecx
mov ecx, dword [ebp - 0x390]
call fcn.00401741
movzx edx, byte [ebp - 0x41]
test edx, edx
je 0x42554f
mov eax, str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsAdministrative_Tools
test eax, eax
jne 0x425517
mov dword [ebp - 0x394], 0
jmp 0x42552a
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsAdministrative_Tools
call fcn.00449260
add esp, 4
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
push ecx
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsAdministrative_Tools
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_COMMON_ADMINTOOLS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1e
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x958], eax
mov edx, dword [ebp - 0x958]
mov dword [ebp - 0x3d4], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4c]
sub ecx, 0x10
mov dword [ebp - 0x3d8], ecx
mov ecx, dword [ebp - 0x3d8]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x54]
call fcn.00409a7c
mov dword [ebp - 0x95c], eax
mov edx, dword [ebp - 0x95c]
mov dword [ebp - 0x3f4], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3f0]
push ecx
mov ecx, dword [ebp - 0x3f4]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x4d], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x54]
sub edx, 0x10
mov dword [ebp - 0x3f8], edx
mov ecx, dword [ebp - 0x3f8]
call fcn.00401741
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x425679
mov ecx, str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
test ecx, ecx
jne 0x425641
mov dword [ebp - 0x3fc], 0
jmp 0x425654
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
call fcn.00449260
add esp, 4
mov dword [ebp - 0x3fc], eax
mov edx, dword [ebp - 0x3fc]
push edx
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_COMMON_ALTSTARTUP
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x23
lea edx, [ebp - 0x58]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x43c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x58]
sub edx, 0x10
mov dword [ebp - 0x440], edx
mov ecx, dword [ebp - 0x440]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x60]
call fcn.00409a7c
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x45c], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x458]
push edx
mov ecx, dword [ebp - 0x45c]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x59], al
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x60]
sub eax, 0x10
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x460]
call fcn.00401741
movzx ecx, byte [ebp - 0x59]
test ecx, ecx
je 0x4257a3
mov edx, str.C:Documents_and_SettingsAll_UsersApplication_Data
test edx, edx
jne 0x42576b
mov dword [ebp - 0x464], 0
jmp 0x42577e
push str.C:Documents_and_SettingsAll_UsersApplication_Data
call fcn.00449260
add esp, 4
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
push eax
push str.C:Documents_and_SettingsAll_UsersApplication_Data
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov ecx, dword [ebp - 0x18]
push ecx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov edx, dword [ebp - 0x10]
push edx
push str.PATH_COMMON_APPDATA
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x19
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x968]
mov dword [ebp - 0x4a4], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x4a4]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x64]
sub eax, 0x10
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a8]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x6c]
call fcn.00409a7c
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x4c4], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c0], edx
mov eax, dword [ebp - 0x4c0]
push eax
mov ecx, dword [ebp - 0x4c4]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x65], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x6c]
sub ecx, 0x10
mov dword [ebp - 0x4c8], ecx
mov ecx, dword [ebp - 0x4c8]
call fcn.00401741
movzx edx, byte [ebp - 0x65]
test edx, edx
je 0x4258cd
mov eax, str.C:Documents_and_SettingsAll_UsersDesktop
test eax, eax
jne 0x425895
mov dword [ebp - 0x4cc], 0
jmp 0x4258a8
push str.C:Documents_and_SettingsAll_UsersDesktop
call fcn.00449260
add esp, 4
mov dword [ebp - 0x4cc], eax
mov ecx, dword [ebp - 0x4cc]
push ecx
push str.C:Documents_and_SettingsAll_UsersDesktop
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_COMMON_DESKTOPDIRECTORY
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x2e
lea ecx, [ebp - 0x70]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x970], eax
mov edx, dword [ebp - 0x970]
mov dword [ebp - 0x50c], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x70]
sub ecx, 0x10
mov dword [ebp - 0x510], ecx
mov ecx, dword [ebp - 0x510]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x78]
call fcn.00409a7c
mov dword [ebp - 0x974], eax
mov edx, dword [ebp - 0x974]
mov dword [ebp - 0x52c], edx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x528]
push ecx
mov ecx, dword [ebp - 0x52c]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x71], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x78]
sub edx, 0x10
mov dword [ebp - 0x530], edx
mov ecx, dword [ebp - 0x530]
call fcn.00401741
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x4259f7
mov ecx, str.C:Documents_and_SettingsAll_UsersDocuments
test ecx, ecx
jne 0x4259bf
mov dword [ebp - 0x534], 0
jmp 0x4259d2
push str.C:Documents_and_SettingsAll_UsersDocuments
call fcn.00449260
add esp, 4
mov dword [ebp - 0x534], eax
mov edx, dword [ebp - 0x534]
push edx
push str.C:Documents_and_SettingsAll_UsersDocuments
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_COMMON_DOCUMENTS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1f
lea edx, [ebp - 0x7c]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x574], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x574]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x7c]
sub edx, 0x10
mov dword [ebp - 0x578], edx
mov ecx, dword [ebp - 0x578]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x84]
call fcn.00409a7c
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x594], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x590], ecx
mov edx, dword [ebp - 0x590]
push edx
mov ecx, dword [ebp - 0x594]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x7d], al
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x84]
sub eax, 0x10
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x598]
call fcn.00401741
movzx ecx, byte [ebp - 0x7d]
test ecx, ecx
je 0x425b27
mov edx, str.C:Documents_and_SettingsAll_UsersFavorites
test edx, edx
jne 0x425aef
mov dword [ebp - 0x59c], 0
jmp 0x425b02
push str.C:Documents_and_SettingsAll_UsersFavorites
call fcn.00449260
add esp, 4
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
push eax
push str.C:Documents_and_SettingsAll_UsersFavorites
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov ecx, dword [ebp - 0x18]
push ecx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov edx, dword [ebp - 0x10]
push edx
push str.PATH_COMMON_FAVORITES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x35
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x5dc], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x5dc]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x88]
sub eax, 0x10
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5e0]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x90]
call fcn.00409a7c
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x5f8], edx
mov eax, dword [ebp - 0x5f8]
push eax
mov ecx, dword [ebp - 0x5fc]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x89], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x90]
sub ecx, 0x10
mov dword [ebp - 0x600], ecx
mov ecx, dword [ebp - 0x600]
call fcn.00401741
movzx edx, byte [ebp - 0x89]
test edx, edx
je 0x425c63
mov eax, str.C:Documents_and_SettingsAll_UsersDocumentsMy_Music
test eax, eax
jne 0x425c2b
mov dword [ebp - 0x604], 0
jmp 0x425c3e
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Music
call fcn.00449260
add esp, 4
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x604]
push ecx
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Music
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_COMMON_MUSIC
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x36
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x988], eax
mov edx, dword [ebp - 0x988]
mov dword [ebp - 0x644], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x644]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x94]
sub ecx, 0x10
mov dword [ebp - 0x648], ecx
mov ecx, dword [ebp - 0x648]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x9c]
call fcn.00409a7c
mov dword [ebp - 0x98c], eax
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x664], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x660], eax
mov ecx, dword [ebp - 0x660]
push ecx
mov ecx, dword [ebp - 0x664]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x95], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x9c]
sub edx, 0x10
mov dword [ebp - 0x668], edx
mov ecx, dword [ebp - 0x668]
call fcn.00401741
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x425d9f
mov ecx, str.C:Documents_and_SettingsAll_UsersDocumentsMy_Pictures
test ecx, ecx
jne 0x425d67
mov dword [ebp - 0x66c], 0
jmp 0x425d7a
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Pictures
call fcn.00449260
add esp, 4
mov dword [ebp - 0x66c], eax
mov edx, dword [ebp - 0x66c]
push edx
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Pictures
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_COMMON_PICTURES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x17
lea edx, [ebp - 0xa0]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x990], eax
mov eax, dword [ebp - 0x990]
mov dword [ebp - 0x6ac], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x6ac]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xa0]
sub edx, 0x10
mov dword [ebp - 0x6b0], edx
mov ecx, dword [ebp - 0x6b0]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xa8]
call fcn.00409a7c
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x6cc], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x6c8], ecx
mov edx, dword [ebp - 0x6c8]
push edx
mov ecx, dword [ebp - 0x6cc]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xa1], al
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
call fcn.00401741
movzx ecx, byte [ebp - 0xa1]
test ecx, ecx
je 0x425edb
mov edx, str.C:Documents_and_SettingsAll_UsersStart_MenuPrograms
test edx, edx
jne 0x425ea3
mov dword [ebp - 0x6d4], 0
jmp 0x425eb6
push str.C:Documents_and_SettingsAll_UsersStart_MenuPrograms
call fcn.00449260
add esp, 4
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
push eax
push str.C:Documents_and_SettingsAll_UsersStart_MenuPrograms
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov ecx, dword [ebp - 0x18]
push ecx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov edx, dword [ebp - 0x10]
push edx
push str.PATH_COMMON_PROGRAMS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x16
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x998]
mov dword [ebp - 0x714], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x714]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x718]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xb4]
call fcn.00409a7c
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x734], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x730], edx
mov eax, dword [ebp - 0x730]
push eax
mov ecx, dword [ebp - 0x734]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xad], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xb4]
sub ecx, 0x10
mov dword [ebp - 0x738], ecx
mov ecx, dword [ebp - 0x738]
call fcn.00401741
movzx edx, byte [ebp - 0xad]
test edx, edx
je 0x426017
mov eax, str.C:Documents_and_SettingsAll_UsersStart_Menu
test eax, eax
jne 0x425fdf
mov dword [ebp - 0x73c], 0
jmp 0x425ff2
push str.C:Documents_and_SettingsAll_UsersStart_Menu
call fcn.00449260
add esp, 4
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0x73c]
push ecx
push str.C:Documents_and_SettingsAll_UsersStart_Menu
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_COMMON_STARTMENU
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x18
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9a0], eax
mov edx, dword [ebp - 0x9a0]
mov dword [ebp - 0x77c], edx
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x77c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xb8]
sub ecx, 0x10
mov dword [ebp - 0x780], ecx
mov ecx, dword [ebp - 0x780]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xc0]
call fcn.00409a7c
mov dword [ebp - 0x9a4], eax
mov edx, dword [ebp - 0x9a4]
mov dword [ebp - 0x79c], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
push ecx
mov ecx, dword [ebp - 0x79c]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xb9], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc0]
sub edx, 0x10
mov dword [ebp - 0x7a0], edx
mov ecx, dword [ebp - 0x7a0]
call fcn.00401741
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x426153
mov ecx, str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
test ecx, ecx
jne 0x42611b
mov dword [ebp - 0x7a4], 0
jmp 0x42612e
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
call fcn.00449260
add esp, 4
mov dword [ebp - 0x7a4], eax
mov edx, dword [ebp - 0x7a4]
push edx
push str.C:Documents_and_SettingsAll_UsersStart_MenuProgramsStartup
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_COMMON_STARTUP
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x2d
lea edx, [ebp - 0xc4]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x7e4], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x7e4]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc4]
sub edx, 0x10
mov dword [ebp - 0x7e8], edx
mov ecx, dword [ebp - 0x7e8]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xcc]
call fcn.00409a7c
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x804], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x800], ecx
mov edx, dword [ebp - 0x800]
push edx
mov ecx, dword [ebp - 0x804]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xc5], al
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xcc]
sub eax, 0x10
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x808]
call fcn.00401741
movzx ecx, byte [ebp - 0xc5]
test ecx, ecx
je 0x42628f
mov edx, str.C:Documents_and_SettingsAll_UsersTemplates
test edx, edx
jne 0x426257
mov dword [ebp - 0x80c], 0
jmp 0x42626a
push str.C:Documents_and_SettingsAll_UsersTemplates
call fcn.00449260
add esp, 4
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x80c]
push eax
push str.C:Documents_and_SettingsAll_UsersTemplates
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov ecx, dword [ebp - 0x18]
push ecx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov edx, dword [ebp - 0x10]
push edx
push str.PATH_COMMON_TEMPLATES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x37
lea eax, [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9b0], eax
mov ecx, dword [ebp - 0x9b0]
mov dword [ebp - 0x84c], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x84c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd0]
sub eax, 0x10
mov dword [ebp - 0x850], eax
mov ecx, dword [ebp - 0x850]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xd8]
call fcn.00409a7c
mov dword [ebp - 0x9b4], eax
mov ecx, dword [ebp - 0x9b4]
mov dword [ebp - 0x86c], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x868], edx
mov eax, dword [ebp - 0x868]
push eax
mov ecx, dword [ebp - 0x86c]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xd1], al
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xd8]
sub ecx, 0x10
mov dword [ebp - 0x870], ecx
mov ecx, dword [ebp - 0x870]
call fcn.00401741
movzx edx, byte [ebp - 0xd1]
test edx, edx
je 0x4263cb
mov eax, str.C:Documents_and_SettingsAll_UsersDocumentsMy_Videos
test eax, eax
jne 0x426393
mov dword [ebp - 0x874], 0
jmp 0x4263a6
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Videos
call fcn.00449260
add esp, 4
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
push ecx
push str.C:Documents_and_SettingsAll_UsersDocumentsMy_Videos
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov edx, dword [ebp - 0x18]
push edx
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov eax, dword [ebp - 0x10]
push eax
push str.PATH_COMMON_VIDEO
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x21
lea ecx, [ebp - 0xdc]
push ecx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9b8], eax
mov edx, dword [ebp - 0x9b8]
mov dword [ebp - 0x8b4], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x8b4]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xdc]
sub ecx, 0x10
mov dword [ebp - 0x8b8], ecx
mov ecx, dword [ebp - 0x8b8]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xe4]
call fcn.00409a7c
mov dword [ebp - 0x9bc], eax
mov edx, dword [ebp - 0x9bc]
mov dword [ebp - 0x8d4], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x8d0], eax
mov ecx, dword [ebp - 0x8d0]
push ecx
mov ecx, dword [ebp - 0x8d4]
call fcn.00411100
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0xdd], al
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xe4]
sub edx, 0x10
mov dword [ebp - 0x8d8], edx
mov ecx, dword [ebp - 0x8d8]
call fcn.00401741
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x426507
mov ecx, str.C:Documents_and_Settings_USER_Cookies
test ecx, ecx
jne 0x4264cf
mov dword [ebp - 0x8dc], 0
jmp 0x4264e2
push str.C:Documents_and_Settings_USER_Cookies
call fcn.00449260
add esp, 4
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0x8dc]
push edx
push str.C:Documents_and_Settings_USER_Cookies
lea ecx, [ebp - 0x10]
call fcn.00403cc5
mov eax, dword [ebp - 0x18]
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
mov ecx, dword [ebp - 0x10]
push ecx
push str.PATH_COOKIES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x10
lea edx, [ebp - 0xe8]
push edx
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x91c], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x91c]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0040e6c3
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xe8]
sub edx, 0x10
mov dword [ebp - 0x920], edx
mov ecx, dword [ebp - 0x920]
call fcn.00401741
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xf0]
call fcn.00409a7c
mov dword [ebp - 0x9c4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x9c4]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0xe9], al
lea ecx, [ebp - 0xf0]
call fcn.00402073
movzx edx, byte [ebp - 0xe9]
test edx, edx
je 0x4265e7
push str.C:Documents_and_Settings_USER_Desktop
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_DESKTOPDIRECTORY
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 6
lea eax, [ebp - 0xf4]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x9cc]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0xfc]
call fcn.00409a7c
mov dword [ebp - 0x9d0], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x9d0]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0xf5], al
lea ecx, [ebp - 0xfc]
call fcn.00402073
movzx edx, byte [ebp - 0xf5]
test edx, edx
je 0x4266bd
push str.C:Documents_and_Settings_USER_Favorites
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_FAVORITES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x22
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9d4], eax
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d8], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x9d8]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x100]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x108]
call fcn.00409a7c
mov dword [ebp - 0x9dc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x9dc]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x101], al
lea ecx, [ebp - 0x108]
call fcn.00402073
movzx edx, byte [ebp - 0x101]
test edx, edx
je 0x426793
push str.C:Documents_and_Settings_USER_Local_SettingsHistory
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_HISTORY
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x20
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9e0], eax
mov ecx, dword [ebp - 0x9e0]
mov dword [ebp - 0x9e4], ecx
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x9e4]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x114]
call fcn.00409a7c
mov dword [ebp - 0x9e8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x9e8]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x10d], al
lea ecx, [ebp - 0x114]
call fcn.00402073
movzx edx, byte [ebp - 0x10d]
test edx, edx
je 0x426869
push str.C:Documents_and_Settings_USER_Local_SettingsTemporary_Internet_Files
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_INTERNET_CACHE
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1c
lea eax, [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9ec], eax
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp - 0x9f0], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x9f0]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x118]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x120]
call fcn.00409a7c
mov dword [ebp - 0x9f4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x9f4]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x119], al
lea ecx, [ebp - 0x120]
call fcn.00402073
movzx edx, byte [ebp - 0x119]
test edx, edx
je 0x42693f
push str.C:Documents_and_Settings_USER_Local_SettingsApplication_Data
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_LOCAL_APPDATA
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0xd
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp - 0x9fc], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x9fc]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x124]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x12c]
call fcn.00409a7c
mov dword [ebp - 0xa00], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa00]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x125], al
lea ecx, [ebp - 0x12c]
call fcn.00402073
movzx edx, byte [ebp - 0x125]
test edx, edx
je 0x426a15
push str.C:Documents_and_Settings_USER_My_DocumentsMy_Music
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_MYMUSIC
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x27
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa04], eax
mov ecx, dword [ebp - 0xa04]
mov dword [ebp - 0xa08], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0xa08]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x130]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x138]
call fcn.00409a7c
mov dword [ebp - 0xa0c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa0c]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x131], al
lea ecx, [ebp - 0x138]
call fcn.00402073
movzx edx, byte [ebp - 0x131]
test edx, edx
je 0x426aeb
push str.C:Documents_and_Settings_USER_My_DocumentsMy_Pictures
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_MYPICTURES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0xe
lea eax, [ebp - 0x13c]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa10], eax
mov ecx, dword [ebp - 0xa10]
mov dword [ebp - 0xa14], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0xa14]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x144]
call fcn.00409a7c
mov dword [ebp - 0xa18], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa18]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x13d], al
lea ecx, [ebp - 0x144]
call fcn.00402073
movzx edx, byte [ebp - 0x13d]
test edx, edx
je 0x426bc1
push str.C:Documents_and_Settings_USER_My_DocumentsMy_Video
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_MYVIDEO
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x13
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa1c], eax
mov ecx, dword [ebp - 0xa1c]
mov dword [ebp - 0xa20], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0xa20]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x148]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x150]
call fcn.00409a7c
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa24]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x149], al
lea ecx, [ebp - 0x150]
call fcn.00402073
movzx edx, byte [ebp - 0x149]
test edx, edx
je 0x426c97
push str.C:Documents_and_Settings_USER_NetHood
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_NETHOOD
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 5
lea eax, [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0xa28]
mov dword [ebp - 0xa2c], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0xa2c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x154]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x15c]
call fcn.00409a7c
mov dword [ebp - 0xa30], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x155], al
lea ecx, [ebp - 0x15c]
call fcn.00402073
movzx edx, byte [ebp - 0x155]
test edx, edx
je 0x426d6d
push str.C:Documents_and_Settings_USER_My_Documents
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PERSONAL
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x1b
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0xa34]
mov dword [ebp - 0xa38], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0xa38]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x160]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x168]
call fcn.00409a7c
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa3c]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x161], al
lea ecx, [ebp - 0x168]
call fcn.00402073
movzx edx, byte [ebp - 0x161]
test edx, edx
je 0x426e43
push str.C:Documents_and_Settings_USER_PrintHood
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PRINTHOOD
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x28
lea eax, [ebp - 0x16c]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa40], eax
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0xa44], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0xa44]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x174]
call fcn.00409a7c
mov dword [ebp - 0xa48], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa48]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x16d], al
lea ecx, [ebp - 0x174]
call fcn.00402073
movzx edx, byte [ebp - 0x16d]
test edx, edx
je 0x426f19
push str.C:Documents_and_Settings_USER_
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PROFILE
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x26
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0xa4c]
mov dword [ebp - 0xa50], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0xa50]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x180]
call fcn.00409a7c
mov dword [ebp - 0xa54], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa54]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x179], al
lea ecx, [ebp - 0x180]
call fcn.00402073
movzx edx, byte [ebp - 0x179]
test edx, edx
je 0x426fef
push str.C:Program_Files
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PROGRAM_FILES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x2b
lea eax, [ebp - 0x184]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
mov dword [ebp - 0xa5c], ecx
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0xa5c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x184]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x18c]
call fcn.00409a7c
mov dword [ebp - 0xa60], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa60]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x185], al
lea ecx, [ebp - 0x18c]
call fcn.00402073
movzx edx, byte [ebp - 0x185]
test edx, edx
je 0x4270c5
push str.C:Program_FilesCommon_Files
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PROGRAM_FILES_COMMON
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 2
lea eax, [ebp - 0x190]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
mov dword [ebp - 0xa68], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0xa68]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x190]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x198]
call fcn.00409a7c
mov dword [ebp - 0xa6c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa6c]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x191], al
lea ecx, [ebp - 0x198]
call fcn.00402073
movzx edx, byte [ebp - 0x191]
test edx, edx
je 0x42719b
push str.C:Documents_and_Settings_USER_Start_MenuPrograms
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PROGRAMS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 8
lea eax, [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa70], eax
mov ecx, dword [ebp - 0xa70]
mov dword [ebp - 0xa74], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0xa74]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x19c]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1a4]
call fcn.00409a7c
mov dword [ebp - 0xa78], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa78]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x19d], al
lea ecx, [ebp - 0x1a4]
call fcn.00402073
movzx edx, byte [ebp - 0x19d]
test edx, edx
je 0x427271
push str.C:Documents_and_Settings_USER_Recent
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_RECENT
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 9
lea eax, [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa7c], eax
mov ecx, dword [ebp - 0xa7c]
mov dword [ebp - 0xa80], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0xa80]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1b0]
call fcn.00409a7c
mov dword [ebp - 0xa84], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa84]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1a9], al
lea ecx, [ebp - 0x1b0]
call fcn.00402073
movzx edx, byte [ebp - 0x1a9]
test edx, edx
je 0x427347
push str.C:Documents_and_Settings_USER_SendTo
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_SENDTO
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0xb
lea eax, [ebp - 0x1b4]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa88], eax
mov ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xa8c], ecx
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0xa8c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b4]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1bc]
call fcn.00409a7c
mov dword [ebp - 0xa90], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa90]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1b5], al
lea ecx, [ebp - 0x1bc]
call fcn.00402073
movzx edx, byte [ebp - 0x1b5]
test edx, edx
je 0x42741d
push str.C:Documents_and_Settings_USER_Start_Menu
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_STARTMENU
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 7
lea eax, [ebp - 0x1c0]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xa94], eax
mov ecx, dword [ebp - 0xa94]
mov dword [ebp - 0xa98], ecx
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0xa98]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c0]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1c8]
call fcn.00409a7c
mov dword [ebp - 0xa9c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xa9c]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1c1], al
lea ecx, [ebp - 0x1c8]
call fcn.00402073
movzx edx, byte [ebp - 0x1c1]
test edx, edx
je 0x4274f3
push str.C:Documents_and_Settings_USER_Start_MenuProgramsStartup
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_STARTUP
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x25
lea eax, [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0xaa0]
mov dword [ebp - 0xaa4], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0xaa4]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cc]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1d4]
call fcn.00409a7c
mov dword [ebp - 0xaa8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xaa8]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1cd], al
lea ecx, [ebp - 0x1d4]
call fcn.00402073
movzx edx, byte [ebp - 0x1cd]
test edx, edx
je 0x4275c9
push str.C:WINDOWS_system32
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_SYSTEM
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x15
lea eax, [ebp - 0x1d8]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xaac], eax
mov ecx, dword [ebp - 0xaac]
mov dword [ebp - 0xab0], ecx
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0xab0]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1d8]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1e0]
call fcn.00409a7c
mov dword [ebp - 0xab4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xab4]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1d9], al
lea ecx, [ebp - 0x1e0]
call fcn.00402073
movzx edx, byte [ebp - 0x1d9]
test edx, edx
je 0x42769f
push str.C:Documents_and_Settings_USER_Templates
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_TEMPLATES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x24
lea eax, [ebp - 0x1e4]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00424f30
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
mov dword [ebp - 0xabc], ecx
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0xabc]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1e4]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1ec]
call fcn.00409a7c
mov dword [ebp - 0xac0], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xac0]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1e5], al
lea ecx, [ebp - 0x1ec]
call fcn.00402073
movzx edx, byte [ebp - 0x1e5]
test edx, edx
je 0x427775
push str.C:WINDOWS
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_WINDOWS
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
lea eax, [ebp - 0x1f0]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00428ad0
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0xac8], ecx
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0xac8]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f0]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x1f8]
call fcn.00409a7c
mov dword [ebp - 0xacc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xacc]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1f1], al
lea ecx, [ebp - 0x1f8]
call fcn.00402073
movzx edx, byte [ebp - 0x1f1]
test edx, edx
je 0x427849
push str.C:Documents_and_Settings_USER_
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_PROFILES
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
lea eax, [ebp - 0x1fc]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00428c00
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xad0]
mov dword [ebp - 0xad4], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0xad4]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1fc]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x204]
call fcn.00409a7c
mov dword [ebp - 0xad8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xad8]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x1fd], al
lea ecx, [ebp - 0x204]
call fcn.00402073
movzx edx, byte [ebp - 0x1fd]
test edx, edx
je 0x42791d
push 0x46c850
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_WINDOWSDRIVE
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
lea eax, [ebp - 0x208]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00428d30
mov dword [ebp - 0xadc], eax
mov ecx, dword [ebp - 0xadc]
mov dword [ebp - 0xae0], ecx
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0xae0]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x208]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x210]
call fcn.00409a7c
mov dword [ebp - 0xae4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xae4]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x209], al
lea ecx, [ebp - 0x210]
call fcn.00402073
movzx edx, byte [ebp - 0x209]
test edx, edx
je 0x4279f1
push str.C:Documents_and_Settings_USER_Application_DataMicrosoftInternet_ExplorerQuick_Launch
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_QUICKLAUNCH
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
lea eax, [ebp - 0x214]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00428e50
mov dword [ebp - 0xae8], eax
mov ecx, dword [ebp - 0xae8]
mov dword [ebp - 0xaec], ecx
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0xaec]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x214]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x21c]
call fcn.00409a7c
mov dword [ebp - 0xaf0], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xaf0]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x215], al
lea ecx, [ebp - 0x21c]
call fcn.00402073
movzx edx, byte [ebp - 0x215]
test edx, edx
je 0x427ac5
push str.C:Documents_and_Settings_USER_Local_SettingsTemp
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push str.PATH_IEDOWNDIR
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
lea eax, [ebp - 0x220]
push eax
mov ecx, dword [ebp - 0x934]
call fcn.00429160
mov dword [ebp - 0xaf4], eax
mov ecx, dword [ebp - 0xaf4]
mov dword [ebp - 0xaf8], ecx
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0xaf8]
push edx
lea ecx, [ebp - 0x10]
call fcn.0040eba7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x220]
call fcn.00402073
push 0x46b5e8
lea ecx, [ebp - 0x10]
call fcn.00427d90
push 0x46b166
lea ecx, [ebp - 0x228]
call fcn.00409a7c
mov dword [ebp - 0xafc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xafc]
push ecx
call fcn.00427e40
add esp, 8
mov byte [ebp - 0x221], al
lea ecx, [ebp - 0x228]
call fcn.00402073
movzx edx, byte [ebp - 0x221]
test edx, edx
je 0x427b99
push str.C:TEMP
lea ecx, [ebp - 0x10]
call fcn.00409835
lea ecx, [ebp - 0x18]
call fcn.004019d6
push eax
push str._USER_
lea ecx, [ebp - 0x10]
call fcn.0040e531
lea ecx, [ebp - 0x10]
call fcn.004019d6
push eax
push 0x46c770
mov ecx, dword [ebp - 0x934]
call fcn.00427fa0
push 0x46b166
lea ecx, [ebp - 0x10]
call fcn.00409835
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00402073
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00402073
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret