Function at 0x437e72
Capabilities:
Check if file exists
Check os version
Create shortcut via ishelllink
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48494e
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x4ad014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x4373bc
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 0
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x4373e3
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 1
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x437407
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x43742b
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 3
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x43744f
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 4
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x437473
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 5
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x437497
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x40], ebx
mov byte [ebp - 4], 6
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x4374bb
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x50], edi
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x18]
push str.filePath
mov byte [ebp - 0x55], 0
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x438e3c
mov eax, dword [ebp - 0x18]
cmp byte [eax + 8], 0
jne 0x4374f9
mov eax, 0x4b15b0
jmp 0x43757b
lea ecx, [ebp - 0x4c]
xorps xmm0, xmm0
push ecx
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x4c], xmm0
push ecx
mov ecx, dword [eax]
mov dword [ebp - 0x4c], str.filePath
mov dword [ebp - 0x48], 0
call fcn.0044c000
mov ecx, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ecx]
cmp eax, dword [ecx]
jne 0x43754f
mov byte [ebp - 4], 8
cmp dword [ebp - 0x4c], 0
je 0x437548
cmp dword [ebp - 0x48], 1
jne 0x437548
call fcn.0044ae60
push dword [ebp - 0x4c]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b15b0
jmp 0x437577
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x4c], 0
je 0x437577
cmp dword [ebp - 0x48], 1
jne 0x437577
call fcn.0044ae60
push dword [ebp - 0x4c]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
cmp byte [eax + 8], 4
jne 0x438e3c
mov esi, dword [ebp - 0x18]
cmp byte [esi + 8], 0
jne 0x437595
mov eax, 0x4b15b0
jmp 0x437614
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.filePath
mov dword [ebp - 0x20], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x4375e8
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0
je 0x4375e1
cmp dword [ebp - 0x20], 1
jne 0x4375e1
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b15b0
jmp 0x437610
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x24], 0
je 0x437610
cmp dword [ebp - 0x20], 1
jne 0x437610
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov edx, dword [eax]
test edx, edx
jne 0x43761e
xor ecx, ecx
jmp 0x437630
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437626
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042cf20
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
call fcn.00457b80
push str.type
mov ecx, esi
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x438d80
cmp byte [esi + 8], 0
jne 0x43766c
mov eax, 0x4b15b0
jmp 0x4376eb
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.type
mov dword [ebp - 0x20], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x4376bf
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x24], 0
je 0x4376b8
cmp dword [ebp - 0x20], 1
jne 0x4376b8
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b15b0
jmp 0x4376e7
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x24], 0
je 0x4376e7
cmp dword [ebp - 0x20], 1
jne 0x4376e7
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov al, byte [eax + 8]
cmp al, 1
je 0x437702
cmp al, 2
je 0x437702
cmp al, 5
je 0x437702
cmp al, 3
jne 0x438d80
cmp byte [esi + 8], 0
jne 0x437712
mov eax, 0x4b15b0
jmp 0x437791
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.type
mov dword [ebp - 0x20], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437765
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x24], 0
je 0x43775e
cmp dword [ebp - 0x20], 1
jne 0x43775e
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b15b0
jmp 0x43778d
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x24], 0
je 0x43778d
cmp dword [ebp - 0x20], 1
jne 0x43778d
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0044b430
push str.name
mov ecx, esi
mov dword [ebp - 0x48], eax
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x438cc4
cmp byte [esi + 8], 0
jne 0x4377c2
mov eax, 0x4b15b0
jmp 0x437841
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.name
mov dword [ebp - 0x20], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437815
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x24], 0
je 0x43780e
cmp dword [ebp - 0x20], 1
jne 0x43780e
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, 0x4b15b0
jmp 0x43783d
add eax, 0x18
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x24], 0
je 0x43783d
cmp dword [ebp - 0x20], 1
jne 0x43783d
call fcn.0044ae60
push dword [ebp - 0x24]
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
cmp byte [eax + 8], 4
jne 0x438cc4
cmp byte [esi + 8], 0
jne 0x437858
mov edi, 0x4b15b0
jmp 0x4378cf
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.name
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x4378aa
mov byte [ebp - 4], 0x12
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x4378a3
cmp dword [ebp - 0x18], 1
jne 0x4378a3
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x4378cb
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x13
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4378cb
cmp dword [ebp - 0x18], 1
jne 0x4378cb
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x4378d9
xor ecx, ecx
jmp 0x4378e9
mov ecx, edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4378e0
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042cf20
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x44]
call fcn.00457b80
push str.description
mov ecx, esi
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x437a54
cmp byte [esi + 8], 0
jne 0x437922
mov edi, 0x4b15b0
jmp 0x437999
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.description
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437974
mov byte [ebp - 4], 0x14
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x43796d
cmp dword [ebp - 0x18], 1
jne 0x43796d
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437995
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437995
cmp dword [ebp - 0x18], 1
jne 0x437995
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x437a54
cmp byte [esi + 8], 0
jne 0x4379b0
mov edi, 0x4b15b0
jmp 0x437a27
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.description
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437a02
mov byte [ebp - 4], 0x16
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x4379fb
cmp dword [ebp - 0x18], 1
jne 0x4379fb
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437a23
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x17
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437a23
cmp dword [ebp - 0x18], 1
jne 0x437a23
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x437a31
xor ecx, ecx
jmp 0x437a3f
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437a36
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042cf20
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x44]
call fcn.00457b80
push str.iconPath
mov ecx, esi
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x437bae
cmp byte [esi + 8], 0
jne 0x437a78
mov edi, 0x4b15b0
jmp 0x437aef
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.iconPath
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437aca
mov byte [ebp - 4], 0x18
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x437ac3
cmp dword [ebp - 0x18], 1
jne 0x437ac3
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437aeb
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x19
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437aeb
cmp dword [ebp - 0x18], 1
jne 0x437aeb
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x437bae
cmp byte [esi + 8], 0
jne 0x437b06
mov edi, 0x4b15b0
jmp 0x437b7d
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.iconPath
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437b58
mov byte [ebp - 4], 0x1a
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x437b51
cmp dword [ebp - 0x18], 1
jne 0x437b51
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437b79
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1b
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437b79
cmp dword [ebp - 0x18], 1
jne 0x437b79
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x437b87
xor ecx, ecx
jmp 0x437b99
mov ecx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437b90
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042cf20
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x44]
call fcn.00457b80
push str.commandLine
mov ecx, esi
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x437d04
cmp byte [esi + 8], 0
jne 0x437bd2
mov edi, 0x4b15b0
jmp 0x437c49
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.commandLine
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437c24
mov byte [ebp - 4], 0x1c
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x437c1d
cmp dword [ebp - 0x18], 1
jne 0x437c1d
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437c45
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1d
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437c45
cmp dword [ebp - 0x18], 1
jne 0x437c45
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 4
jne 0x437d04
cmp byte [esi + 8], 0
jne 0x437c60
mov edi, 0x4b15b0
jmp 0x437cd7
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.commandLine
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437cb2
mov byte [ebp - 4], 0x1e
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x437cab
cmp dword [ebp - 0x18], 1
jne 0x437cab
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437cd3
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x1f
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437cd3
cmp dword [ebp - 0x18], 1
jne 0x437cd3
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
mov edx, dword [edi]
test edx, edx
jne 0x437ce1
xor ecx, ecx
jmp 0x437cef
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437ce6
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042cf20
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x44]
call fcn.00457b80
push str.public
mov ecx, esi
call fcn.0044bc90
cmp eax, 0x4b15b0
je 0x437e7d
cmp byte [esi + 8], 0
jne 0x437d28
mov edi, 0x4b15b0
jmp 0x437d9f
mov ecx, dword [esi]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
push eax
mov dword [ebp - 0x1c], str.public
mov dword [ebp - 0x18], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437d7a
mov byte [ebp - 4], 0x20
mov edi, dword [ebp - 0x1c]
test edi, edi
je 0x437d73
cmp dword [ebp - 0x18], 1
jne 0x437d73
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov edi, 0x4b15b0
jmp 0x437d9b
lea edi, [eax + 0x18]
mov byte [ebp - 4], 0x21
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x437d9b
cmp dword [ebp - 0x18], 1
jne 0x437d9b
call fcn.0044ae60
push ebx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
cmp byte [edi + 8], 5
jne 0x437e7d
cmp byte [esi + 8], 0
jne 0x437db6
mov esi, 0x4b15b0
jmp 0x437e2d
mov ecx, dword [esi]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
movq qword [ebp - 0x24], xmm0
push eax
mov dword [ebp - 0x24], str.public
mov dword [ebp - 0x20], 0
call fcn.0044c000
mov ecx, dword [esi]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x437e08
mov byte [ebp - 4], 0x22
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x437e01
cmp dword [ebp - 0x20], 1
jne 0x437e01
call fcn.0044ae60
push esi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, 0x4b15b0
jmp 0x437e29
lea esi, [eax + 0x18]
mov byte [ebp - 4], 0x23
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x437e29
cmp dword [ebp - 0x20], 1
jne 0x437e29
call fcn.0044ae60
push edi
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [ebp - 4], 7
movsx eax, byte [esi + 8]
cmp eax, 7
ja case.0x437e36.0
jmp dword [eax*4 + 0x43901c]
xor bl, bl
jmp 0x437e80
cmp dword [esi], 0
setne bl
jmp 0x437e80
movsd xmm0, qword [esi]
ucomisd xmm0, qword [0x49d8c0]
lahf
test ah, 0x44
jnp case.0x437e36.0
mov bl, 1
jmp 0x437e80
mov bl, byte [esi]
jmp 0x437e80
mov eax, dword [esi]
test eax, eax
je case.0x437e36.0
cmp byte [eax], 0
je case.0x437e36.0
mov bl, 1
jmp 0x437e80
mov eax, dword [esi]
cmp dword [eax + 4], 0
setne bl
jmp 0x437e80
mov bl, byte [ebp - 0x55]
mov eax, dword [0x4b143c]
test eax, eax
jne 0x437ebc
push 0x230
call fcn.0045b485
mov esi, eax
mov dword [ebp - 0x20], esi
push 0x230
push 0
push esi
mov byte [ebp - 4], 0x24
call fcn.0045fd40
add esp, 0x10
mov ecx, esi
call fcn.00428060
mov byte [ebp - 4], 7
mov dword [0x4b143c], eax
cmp byte [eax + 0x208], 0
je 0x437f74
lea ecx, [eax + 0x218]
push ecx
lea edx, [eax + 0x210]
lea ecx, [ebp - 0x2c]
call fcn.00458f70
mov edx, dword [0x4b143c]
add esp, 4
test edx, edx
jne 0x437f21
push 0x230
call fcn.0045b485
mov esi, eax
mov dword [ebp - 0x14], esi
push 0x230
push 0
push esi
mov byte [ebp - 4], 0x27
call fcn.0045fd40
add esp, 0x10
mov ecx, esi
call fcn.00428060
mov edx, eax
mov byte [ebp - 4], 7
mov dword [0x4b143c], edx
mov edi, edx
test edx, edx
jne 0x437f5c
push 0x230
call fcn.0045b485
mov esi, eax
mov dword [ebp - 0x14], esi
push 0x230
push edi
push esi
mov byte [ebp - 4], 0x28
call fcn.0045fd40
add esp, 0x10
mov ecx, esi
call fcn.00428060
mov edx, eax
mov byte [ebp - 4], 7
mov dword [0x4b143c], edx
lea eax, [edi + 0x218]
add edx, 0x210
push eax
lea ecx, [ebp - 0x50]
call fcn.00458f70
add esp, 4
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x437f89
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
setbe byte [ebp - 0x55]
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x437fb9
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0x2a
test bl, bl
je 0x4381a0
mov eax, dword [ebp - 0x48]
or ebx, 0xffffffff
test eax, eax
jne 0x438050
call fcn.0040f6c0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x438029
test ecx, ecx
jne 0x437ff5
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2b
push str.PUBLIC
lea esi, [ebp - 0x14]
call fcn.0042ab90
mov ecx, esi
call fcn.004562b0
mov esi, dword [ebp - 0x14]
push esi
push str._sDesktop
jmp 0x43817c
test ecx, ecx
jne 0x438037
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2c
push str.ALLUSERSPROFILE
jmp 0x43800c
cmp eax, 1
jne 0x4380ea
call fcn.0040f6c0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x4380a8
test ecx, ecx
jne 0x438074
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2d
push str.PROGRAMDATA
lea esi, [ebp - 0x14]
call fcn.0042ab90
mov ecx, esi
call fcn.004562b0
mov esi, dword [ebp - 0x14]
push esi
push str._sMicrosoftWindowsStart_MenuPrograms
jmp 0x43817c
test ecx, ecx
jne 0x4380b6
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2e
push str.ALLUSERSPROFILE
lea esi, [ebp - 0x14]
call fcn.0042ab90
mov ecx, esi
call fcn.004562b0
mov esi, dword [ebp - 0x14]
push esi
push str._sStart_MenuPrograms
jmp 0x43817c
cmp eax, 2
jne 0x4381da
call fcn.0040f6c0
cmp byte [ebp - 0x55], 0
mov ecx, eax
jne 0x43813f
test ecx, ecx
jne 0x43810e
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x2f
push str.PROGRAMDATA
lea esi, [ebp - 0x14]
call fcn.0042ab90
mov ecx, esi
call fcn.004562b0
mov esi, dword [ebp - 0x14]
push esi
push str._sMicrosoftWindowsStart_MenuProgramsStartup
jmp 0x43817c
test ecx, ecx
jne 0x43814d
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x30
push str.ALLUSERSPROFILE
lea esi, [ebp - 0x14]
call fcn.0042ab90
mov ecx, esi
call fcn.004562b0
mov esi, dword [ebp - 0x14]
push esi
push str._sStart_MenuProgramsStartup
lea eax, [ebp - 0x30]
push eax
call fcn.0042d0a0
add esp, 0x10
mov byte [ebp - 4], 0x2a
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4381d7
mov ecx, dword [esi]
push esi
jmp 0x4381d2
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x14]
call fcn.00457f00
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x31
call fcn.0042baa0
mov byte [ebp - 4], 0x2a
or eax, 0xffffffff
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4381d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x18]
push ebx
push edi
push str._s_s.lnk
push eax
call fcn.0042d0a0
mov esi, dword [ebp - 0x18]
add esp, 0x10
push esi
push str.CDispatcherHandler::CreateShortcut
push str._s_Shortcut_link___s_
push 0
push 5
call fcn.004548f0
add esp, 0x14
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x55], 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, 1
cmp eax, 0xffffffff
je 0x438231
test al, 0x10
mov eax, dword [ebp - 0x5c]
movzx eax, al
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x2c]
call fcn.004530c0
movzx ecx, byte [ebp - 0x55]
test al, al
mov eax, 1
mov dword [ebp - 0x34], 0
cmovne ecx, eax
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x32
push eax
push 0x488640
push 0x17
push 0
push 0x488660
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edx, eax
test edx, edx
js 0x438bad
mov eax, dword [ebp - 0x34]
push dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
jns 0x4383a8
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetPath__d__d__s__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4382d8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4382f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438311
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43832c
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43834a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438368
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438386
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x1c]
test eax, eax
jns 0x4384da
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x3c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetDescription__d__d__s__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43840a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438428
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438443
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43845e
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43847c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43849a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4384b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
push 0
cmp dword [ecx - 0xc], 0
jne 0x43861a
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
test eax, eax
jns 0x438749
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetIconLocation_Exec__d__d__s__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43854a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438568
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438583
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43859e
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4385bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4385da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4385f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x44]
mov edx, eax
test edx, edx
jns 0x438749
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push edx
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetIconLocation_Icon__d__d__s__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x438679
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438697
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4386b2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4386cd
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4386eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438709
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438727
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov ecx, dword [ebp - 0x40]
cmp dword [ecx - 0xc], 0
je 0x438888
mov eax, dword [ebp - 0x34]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
test edx, edx
jns 0x438888
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push edx
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_SetArguments__d__d__s__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x30
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4387b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4387d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4387f1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x43880c
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43882a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438848
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438866
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x34]
push edx
push 0x488630
push eax
mov ecx, dword [eax]
call dword [ecx]
mov edx, eax
test edx, edx
js 0x438a85
mov eax, dword [ebp - 0x14]
push 1
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
jns 0x438975
mov ecx, dword [ebp - 0x20]
movzx ecx, cl
push ecx
mov ecx, dword [ebp - 0x5c]
movzx ecx, cl
push ecx
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x28]
push str.createShortcut_Save__d__d__d__d
push eax
call fcn.0042d0a0
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.0042c130
add eax, 0x10
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x34
push eax
mov edx, 0x495a3c
lea ecx, [ebp - 0x48]
call fcn.0042a350
add esp, 0x1c
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x20]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042b9d0
mov byte [ebp - 4], 0x34
or eax, 0xffffffff
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43893c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x20]
push esi
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
add esp, 0x14
mov byte [ebp - 4], 0x33
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438972
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x18]
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x438986
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x54]
call fcn.0042baa0
push 0x496f74
push 0x496340
lea ecx, [ebp - 0x54]
call fcn.0042a7b0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4389b5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4389d3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4389ee
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438a09
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438a27
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438a45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438a63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov ecx, dword [ebp - 0x20]
movzx eax, cl
mov ecx, dword [ebp - 0x5c]
push eax
movzx eax, cl
push eax
push edx
lea eax, [ebp - 0x28]
push str.createShortcut_QueryInterface__d__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x32
add esp, 0x28
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x438acc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x438add
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438afb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438b16
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438b31
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438b4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438b6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438b8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
mov ecx, dword [ebp - 0x20]
movzx eax, cl
mov ecx, dword [ebp - 0x5c]
push eax
movzx eax, cl
push eax
push edx
lea eax, [ebp - 0x28]
push str.createShortcut_CoCreateInstance__d__d__d
push eax
call fcn.0042d0a0
push dword [ebp - 0x28]
push str.CDispatcherHandler::CreateShortcut
push str._s_createShortcut___s_
push 3
push 5
call fcn.004548f0
mov byte [ebp - 4], 0x2a
add esp, 0x28
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x438bf4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0x29
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438c12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438c2d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 6
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438c48
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438c66
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438c84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ca2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
push 0x1b
push str.createShortcut_name_missing
lea ecx, [ebp - 0x28]
call fcn.0042c270
push str.CDispatcherHandler::CreateShortcut
push str._s_name_error
push 3
push 5
call fcn.004548f0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438d07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438d22
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438d40
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438d5e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
push 0x1b
push str.createShortcut_type_missing
lea ecx, [ebp - 0x28]
call fcn.0042c270
push str.CDispatcherHandler::CreateShortcut
push str._s_type_error
push 3
push 5
call fcn.004548f0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438dc3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438dde
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438dfc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438e1a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [edx]
push edx
jmp 0x438eec
push 0x1f
push str.createShortcut_filePath_missing
lea ecx, [ebp - 0x28]
call fcn.0042c270
push str.CDispatcherHandler::CreateShortcut
push str._s_filePath_error
push 3
push 5
call fcn.004548f0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 6
or edi, 0xffffffff
add esp, 0x10
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438e7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add ebx, 0xfffffff0
mov eax, edi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x438e9a
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438eb8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438ed6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438ef1
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x438f9e
mov eax, 8
mov word [ebx], ax
call fcn.0040f6c0
mov ecx, eax
test ecx, ecx
jne 0x438f19
push 0x80004005
call fcn.0041ff40
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x36
mov edx, 0x496eb8
mov eax, dword [ebp - 0x28]
mov ecx, 0x496eac
mov edi, dword [ebp - 0x54]
push eax
cmp dword [eax - 0xc], 0
lea eax, [ebp - 0x14]
cmovne ecx, edx
push ecx
push edi
push str.__path__:___s_____result__:__s____error__:___s_
push eax
call fcn.0042d0a0
add esp, 0x14
lea ecx, [ebp - 0x14]
push 0x496f74
push 0x496340
call fcn.0042a7b0
mov esi, dword [ebp - 0x14]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x438f7b
call fcn.0042c120
mov dword [ebx + 8], eax
add esi, 0xfffffff0
or ebx, 0xffffffff
mov byte [ebp - 4], 2
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438fa4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x438fa4
mov edi, dword [ebp - 0x54]
or ebx, 0xffffffff
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x438fc2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x438fdd
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x44]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x438ffc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045b46f
mov esp, ebp
pop ebp
ret 8