Function at 0x10003440
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100495c0
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x1007f008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x290], ecx
mov dword [ebp - 4], 0
xor edi, edi
mov eax, dword [ebp + 8]
mov ecx, 0x10084fe6
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x284], edi
call fcn.10048d85
mov eax, dword [0x10083380]
test al, 1
jne 0x100034d7
or eax, 1
mov dword [0x10083380], eax
mov dword [ebp - 4], 1
push 0x100595f0
mov dword [0x10083384], edi
mov dword [0x10083388], edi
mov dword [0x1008338c], edi
call fcn.1004712d
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [0x10083388]
cmp dword [0x10083384], eax
jne 0x10004757
xor ecx, ecx
mov dword [ebp - 0x27c], str.CSIDL_DESKTOP
mov dword [ebp - 0x278], ecx
cmp dword [0x1008338c], eax
je 0x1000351a
mov dword [eax], str.CSIDL_DESKTOP
mov dword [eax + 4], ecx
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000352c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_INTERNET
mov dword [ebp - 0x278], 1
cmp dword [0x1008338c], eax
je 0x10003564
mov dword [eax], str.CSIDL_INTERNET
mov dword [eax + 4], 1
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003576
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROGRAMS
mov dword [ebp - 0x278], 2
cmp dword [0x1008338c], eax
je 0x100035ae
mov dword [eax], str.CSIDL_PROGRAMS
mov dword [eax + 4], 2
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100035c0
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_CONTROLS
mov dword [ebp - 0x278], 3
cmp dword [0x1008338c], eax
je 0x100035f8
mov dword [eax], str.CSIDL_CONTROLS
mov dword [eax + 4], 3
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000360a
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PRINTERS
mov dword [ebp - 0x278], 4
cmp dword [0x1008338c], eax
je 0x10003642
mov dword [eax], str.CSIDL_PRINTERS
mov dword [eax + 4], 4
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003654
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PERSONAL
mov dword [ebp - 0x278], 5
cmp dword [0x1008338c], eax
je 0x1000368c
mov dword [eax], str.CSIDL_PERSONAL
mov dword [eax + 4], 5
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000369e
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FAVORITES
mov dword [ebp - 0x278], 6
cmp dword [0x1008338c], eax
je 0x100036d6
mov dword [eax], str.CSIDL_FAVORITES
mov dword [eax + 4], 6
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100036e8
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_STARTUP
mov dword [ebp - 0x278], 7
cmp dword [0x1008338c], eax
je 0x10003720
mov dword [eax], str.CSIDL_STARTUP
mov dword [eax + 4], 7
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003732
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_RECENT
mov dword [ebp - 0x278], 8
cmp dword [0x1008338c], eax
je 0x1000376a
mov dword [eax], str.CSIDL_RECENT
mov dword [eax + 4], 8
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000377c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_SENDTO
mov dword [ebp - 0x278], 9
cmp dword [0x1008338c], eax
je 0x100037b4
mov dword [eax], str.CSIDL_SENDTO
mov dword [eax + 4], 9
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100037c6
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_BITBUCKET
mov dword [ebp - 0x278], 0xa
cmp dword [0x1008338c], eax
je 0x100037fe
mov dword [eax], str.CSIDL_BITBUCKET
mov dword [eax + 4], 0xa
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003810
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_STARTMENU
mov dword [ebp - 0x278], 0xb
cmp dword [0x1008338c], eax
je 0x10003848
mov dword [eax], str.CSIDL_STARTMENU
mov dword [eax + 4], 0xb
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000385a
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_DESKTOPDIRECTORY
mov dword [ebp - 0x278], 0x10
cmp dword [0x1008338c], eax
je 0x10003892
mov dword [eax], str.CSIDL_DESKTOPDIRECTORY
mov dword [eax + 4], 0x10
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100038a4
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_DRIVES
mov dword [ebp - 0x278], 0x11
cmp dword [0x1008338c], eax
je 0x100038dc
mov dword [eax], str.CSIDL_DRIVES
mov dword [eax + 4], 0x11
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100038ee
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_NETWORK
mov dword [ebp - 0x278], 0x12
cmp dword [0x1008338c], eax
je 0x10003926
mov dword [eax], str.CSIDL_NETWORK
mov dword [eax + 4], 0x12
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003938
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_NETHOOD
mov dword [ebp - 0x278], 0x13
cmp dword [0x1008338c], eax
je 0x10003970
mov dword [eax], str.CSIDL_NETHOOD
mov dword [eax + 4], 0x13
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003982
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FONTS
mov dword [ebp - 0x278], 0x14
cmp dword [0x1008338c], eax
je 0x100039ba
mov dword [eax], str.CSIDL_FONTS
mov dword [eax + 4], 0x14
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100039cc
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_TEMPLATES
mov dword [ebp - 0x278], 0x15
cmp dword [0x1008338c], eax
je 0x10003a04
mov dword [eax], str.CSIDL_TEMPLATES
mov dword [eax + 4], 0x15
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003a16
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_STARTMENU
mov dword [ebp - 0x278], 0x16
cmp dword [0x1008338c], eax
je 0x10003a4e
mov dword [eax], str.CSIDL_COMMON_STARTMENU
mov dword [eax + 4], 0x16
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003a60
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_PROGRAMS
mov dword [ebp - 0x278], 0x17
cmp dword [0x1008338c], eax
je 0x10003a98
mov dword [eax], str.CSIDL_COMMON_PROGRAMS
mov dword [eax + 4], 0x17
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003aaa
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_STARTUP
mov dword [ebp - 0x278], 0x18
cmp dword [0x1008338c], eax
je 0x10003ae2
mov dword [eax], str.CSIDL_COMMON_STARTUP
mov dword [eax + 4], 0x18
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003af4
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_DESKTOPDIRECTORY
mov dword [ebp - 0x278], 0x19
cmp dword [0x1008338c], eax
je 0x10003b2c
mov dword [eax], str.CSIDL_COMMON_DESKTOPDIRECTORY
mov dword [eax + 4], 0x19
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003b3e
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_APPDATA
mov dword [ebp - 0x278], 0x1a
cmp dword [0x1008338c], eax
je 0x10003b76
mov dword [eax], str.CSIDL_APPDATA
mov dword [eax + 4], 0x1a
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003b88
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PRINTHOOD
mov dword [ebp - 0x278], 0x1b
cmp dword [0x1008338c], eax
je 0x10003bc0
mov dword [eax], str.CSIDL_PRINTHOOD
mov dword [eax + 4], 0x1b
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003bd2
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_ALTSTARTUP
mov dword [ebp - 0x278], 0x1d
cmp dword [0x1008338c], eax
je 0x10003c0a
mov dword [eax], str.CSIDL_ALTSTARTUP
mov dword [eax + 4], 0x1d
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003c1c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_ALTSTARTUP
mov dword [ebp - 0x278], 0x1e
cmp dword [0x1008338c], eax
je 0x10003c54
mov dword [eax], str.CSIDL_COMMON_ALTSTARTUP
mov dword [eax + 4], 0x1e
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003c66
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_FAVORITES
mov dword [ebp - 0x278], 0x1f
cmp dword [0x1008338c], eax
je 0x10003c9e
mov dword [eax], str.CSIDL_COMMON_FAVORITES
mov dword [eax + 4], 0x1f
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003cb0
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_INTERNET_CACHE
mov dword [ebp - 0x278], 0x20
cmp dword [0x1008338c], eax
je 0x10003ce8
mov dword [eax], str.CSIDL_INTERNET_CACHE
mov dword [eax + 4], 0x20
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003cfa
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COOKIES
mov dword [ebp - 0x278], 0x21
cmp dword [0x1008338c], eax
je 0x10003d32
mov dword [eax], str.CSIDL_COOKIES
mov dword [eax + 4], 0x21
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003d44
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_HISTORY
mov dword [ebp - 0x278], 0x22
cmp dword [0x1008338c], eax
je 0x10003d7c
mov dword [eax], str.CSIDL_HISTORY
mov dword [eax + 4], 0x22
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003d8e
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_LOCAL_APPDATA
mov dword [ebp - 0x278], 0x1c
cmp dword [0x1008338c], eax
je 0x10003dc6
mov dword [eax], str.CSIDL_LOCAL_APPDATA
mov dword [eax + 4], 0x1c
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003dd8
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_APPDATA
mov dword [ebp - 0x278], 0x23
cmp dword [0x1008338c], eax
je 0x10003e10
mov dword [eax], str.CSIDL_COMMON_APPDATA
mov dword [eax + 4], 0x23
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003e22
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_WINDOWS
mov dword [ebp - 0x278], 0x24
cmp dword [0x1008338c], eax
je 0x10003e5a
mov dword [eax], str.CSIDL_WINDOWS
mov dword [eax + 4], 0x24
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003e6c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_SYSTEM
mov dword [ebp - 0x278], 0x25
cmp dword [0x1008338c], eax
je 0x10003ea4
mov dword [eax], str.CSIDL_SYSTEM
mov dword [eax + 4], 0x25
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003eb6
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_ADMINTOOLS
mov dword [ebp - 0x278], 0x30
cmp dword [0x1008338c], eax
je 0x10003eee
mov dword [eax], str.CSIDL_ADMINTOOLS
mov dword [eax + 4], 0x30
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003f00
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_ALTSTARTUP
mov dword [ebp - 0x278], 0x1d
cmp dword [0x1008338c], eax
je 0x10003f38
mov dword [eax], str.CSIDL_ALTSTARTUP
mov dword [eax + 4], 0x1d
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003f4a
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_CDBURN_AREA
mov dword [ebp - 0x278], 0x3b
cmp dword [0x1008338c], eax
je 0x10003f82
mov dword [eax], str.CSIDL_CDBURN_AREA
mov dword [eax + 4], 0x3b
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003f94
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_ADMINTOOLS
mov dword [ebp - 0x278], 0x2f
cmp dword [0x1008338c], eax
je 0x10003fcc
mov dword [eax], str.CSIDL_COMMON_ADMINTOOLS
mov dword [eax + 4], 0x2f
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10003fde
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_DOCUMENTS
mov dword [ebp - 0x278], 0x2e
cmp dword [0x1008338c], eax
je 0x10004016
mov dword [eax], str.CSIDL_COMMON_DOCUMENTS
mov dword [eax + 4], 0x2e
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004028
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_MUSIC
mov dword [ebp - 0x278], 0x35
cmp dword [0x1008338c], eax
je 0x10004060
mov dword [eax], str.CSIDL_COMMON_MUSIC
mov dword [eax + 4], 0x35
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004072
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_OEM_LINKS
mov dword [ebp - 0x278], 0x3a
cmp dword [0x1008338c], eax
je 0x100040aa
mov dword [eax], str.CSIDL_COMMON_OEM_LINKS
mov dword [eax + 4], 0x3a
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100040bc
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_PICTURES
mov dword [ebp - 0x278], 0x36
cmp dword [0x1008338c], eax
je 0x100040f4
mov dword [eax], str.CSIDL_COMMON_PICTURES
mov dword [eax + 4], 0x36
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004106
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_TEMPLATES
mov dword [ebp - 0x278], 0x2d
cmp dword [0x1008338c], eax
je 0x1000413e
mov dword [eax], str.CSIDL_COMMON_TEMPLATES
mov dword [eax + 4], 0x2d
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004150
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMMON_VIDEO
mov dword [ebp - 0x278], 0x37
cmp dword [0x1008338c], eax
je 0x10004188
mov dword [eax], str.CSIDL_COMMON_VIDEO
mov dword [eax + 4], 0x37
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000419a
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_COMPUTERSNEARME
mov dword [ebp - 0x278], 0x3d
cmp dword [0x1008338c], eax
je 0x100041d2
mov dword [eax], str.CSIDL_COMPUTERSNEARME
mov dword [eax + 4], 0x3d
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100041e4
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_CONNECTIONS
mov dword [ebp - 0x278], 0x31
cmp dword [0x1008338c], eax
je 0x1000421c
mov dword [eax], str.CSIDL_CONNECTIONS
mov dword [eax + 4], 0x31
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000422e
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_MYDOCUMENTS
mov dword [ebp - 0x278], 5
cmp dword [0x1008338c], eax
je 0x10004266
mov dword [eax], str.CSIDL_MYDOCUMENTS
mov dword [eax + 4], 5
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004278
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_MYMUSIC
mov dword [ebp - 0x278], 0xd
cmp dword [0x1008338c], eax
je 0x100042b0
mov dword [eax], str.CSIDL_MYMUSIC
mov dword [eax + 4], 0xd
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100042c2
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_MYPICTURES
mov dword [ebp - 0x278], 0x27
cmp dword [0x1008338c], eax
je 0x100042fa
mov dword [eax], str.CSIDL_MYPICTURES
mov dword [eax + 4], 0x27
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000430c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_MYVIDEO
mov dword [ebp - 0x278], 0xe
cmp dword [0x1008338c], eax
je 0x10004344
mov dword [eax], str.CSIDL_MYVIDEO
mov dword [eax + 4], 0xe
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004356
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROFILE
mov dword [ebp - 0x278], 0x28
cmp dword [0x1008338c], eax
je 0x1000438e
mov dword [eax], str.CSIDL_PROFILE
mov dword [eax + 4], 0x28
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100043a0
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROGRAM_FILES
mov dword [ebp - 0x278], 0x26
cmp dword [0x1008338c], eax
je 0x100043d8
mov dword [eax], str.CSIDL_PROGRAM_FILES
mov dword [eax + 4], 0x26
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100043ea
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROGRAM_FILESX86
mov dword [ebp - 0x278], 0x2a
cmp dword [0x1008338c], eax
je 0x10004422
mov dword [eax], str.CSIDL_PROGRAM_FILESX86
mov dword [eax + 4], 0x2a
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004434
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROGRAM_FILES_COMMON
mov dword [ebp - 0x278], 0x2b
cmp dword [0x1008338c], eax
je 0x1000446c
mov dword [eax], str.CSIDL_PROGRAM_FILES_COMMON
mov dword [eax + 4], 0x2b
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000447e
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_PROGRAM_FILES_COMMONX86
mov dword [ebp - 0x278], 0x2c
cmp dword [0x1008338c], eax
je 0x100044b6
mov dword [eax], str.CSIDL_PROGRAM_FILES_COMMONX86
mov dword [eax + 4], 0x2c
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100044c8
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_RESOURCES
mov dword [ebp - 0x278], 0x38
cmp dword [0x1008338c], eax
je 0x10004500
mov dword [eax], str.CSIDL_RESOURCES
mov dword [eax + 4], 0x38
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004512
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_RESOURCES_LOCALIZED
mov dword [ebp - 0x278], 0x39
cmp dword [0x1008338c], eax
je 0x1000454a
mov dword [eax], str.CSIDL_RESOURCES_LOCALIZED
mov dword [eax + 4], 0x39
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000455c
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_SYSTEMX86
mov dword [ebp - 0x278], 0x29
cmp dword [0x1008338c], eax
je 0x10004594
mov dword [eax], str.CSIDL_SYSTEMX86
mov dword [eax + 4], 0x29
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100045a6
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_CREATE
mov dword [ebp - 0x278], 0x8000
cmp dword [0x1008338c], eax
je 0x100045de
mov dword [eax], str.CSIDL_FLAG_CREATE
mov dword [eax + 4], 0x8000
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100045f0
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_DONT_UNEXPAND
mov dword [ebp - 0x278], 0x2000
cmp dword [0x1008338c], eax
je 0x10004628
mov dword [eax], str.CSIDL_FLAG_DONT_UNEXPAND
mov dword [eax + 4], 0x2000
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x1000463a
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_DONT_VERIFY
mov dword [ebp - 0x278], 0x4000
cmp dword [0x1008338c], eax
je 0x10004672
mov dword [eax], str.CSIDL_FLAG_DONT_VERIFY
mov dword [eax + 4], 0x4000
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004684
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_NO_ALIAS
mov dword [ebp - 0x278], 0x1000
cmp dword [0x1008338c], eax
je 0x100046bc
mov dword [eax], str.CSIDL_FLAG_NO_ALIAS
mov dword [eax + 4], 0x1000
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x100046ce
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_PER_USER_INIT
mov dword [ebp - 0x278], 0x800
cmp dword [0x1008338c], eax
je 0x10004706
mov dword [eax], str.CSIDL_FLAG_PER_USER_INIT
mov dword [eax + 4], 0x800
mov eax, dword [0x10083388]
add eax, 8
mov dword [0x10083388], eax
jmp 0x10004718
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov eax, dword [0x10083388]
mov dword [ebp - 0x27c], str.CSIDL_FLAG_MASK
mov dword [ebp - 0x278], 0xff00
cmp dword [0x1008338c], eax
je 0x1000474a
mov dword [eax], str.CSIDL_FLAG_MASK
mov dword [eax + 4], 0xff00
add dword [0x10083388], 8
jmp 0x10004757
lea ecx, [ebp - 0x27c]
push ecx
push eax
call fcn.1000ac60
mov dword [ebp - 4], 2
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 4], 5
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov dword [ebp - 4], 6
xorps xmm0, xmm0
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 7
xor dl, dl
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov byte [ebp - 0x27d], dl
cmp dword [esi + 0x10], ebx
jbe 0x10004a07
nop word [eax + eax]
mov eax, dword [esi + 0x14]
mov ecx, esi
cmp eax, 8
jb 0x100047ec
mov ecx, dword [esi]
cmp word [ecx + ebx*2], 0x25
jne 0x10004998
test dl, dl
je 0x100048f2
mov ecx, esi
cmp eax, 8
jb 0x10004808
mov ecx, dword [esi]
movzx edx, word [ecx + ebx*2]
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [ebp - 0x21c]
jae 0x10004844
cmp dword [ebp - 0x21c], 8
lea eax, [ecx + 1]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx*2], dx
xor edx, edx
mov word [eax + ecx*2 + 2], dx
jmp 0x1000485e
push edx
mov byte [ebp - 0x274], 0
push dword [ebp - 0x274]
push ecx
lea ecx, [ebp - 0x230]
call fcn.1000b8f0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x270]
call fcn.10006db0
mov byte [ebp - 4], 9
mov byte [ebp - 0x258], 1
mov byte [ebp - 4], 8
lea eax, [ebp - 0x270]
or edi, 2
lea ecx, [ebp - 0x23c]
push eax
mov dword [ebp - 0x284], edi
call fcn.100059e0
and edi, 0xfffffffd
mov dword [ebp - 0x284], edi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x270]
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.100080f0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 7
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
mov dword [ebp - 0x220], 0
cmovae eax, dword [ebp - 0x230]
xor ecx, ecx
mov word [eax], cx
jmp 0x100049f7
cmp dword [ebp - 0x220], 0
je 0x10004991
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.10006db0
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x294], 0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2ac]
or edi, 4
lea ecx, [ebp - 0x23c]
push eax
mov dword [ebp - 0x284], edi
call fcn.100059e0
and edi, 0xfffffffb
mov dword [ebp - 0x284], edi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0x12
mov ecx, eax
call fcn.100080f0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 7
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
mov dword [ebp - 0x220], 0
cmovae eax, dword [ebp - 0x230]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [esi + 0x14]
mov byte [ebp - 0x27d], 1
mov ecx, esi
cmp eax, 8
jb 0x100049a1
mov ecx, dword [esi]
movzx edx, word [ecx + ebx*2]
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [ebp - 0x21c]
jae 0x100049dd
cmp dword [ebp - 0x21c], 8
lea eax, [ecx + 1]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
mov word [eax + ecx*2], dx
xor edx, edx
mov word [eax + ecx*2 + 2], dx
jmp 0x100049f7
push edx
mov byte [ebp - 0x288], 0
push dword [ebp - 0x288]
push ecx
lea ecx, [ebp - 0x230]
call fcn.1000b8f0
mov dl, byte [ebp - 0x27d]
inc ebx
cmp ebx, dword [esi + 0x10]
jb 0x100047e0
cmp dword [ebp - 0x220], 0
je 0x10004a7c
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.10006db0
mov byte [ebp - 4], 0x17
mov byte [ebp - 0x294], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x2ac]
or edi, 8
lea ecx, [ebp - 0x23c]
push eax
mov dword [ebp - 0x284], edi
call fcn.100059e0
and edi, 0xfffffff7
mov dword [ebp - 0x284], edi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.100080f0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x28c]
mov byte [ebp - 4], 0x1d
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [ebp - 4], 0x20
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 7
or edi, 1
mov dword [ebp - 0x284], edi
mov esi, dword [ebp - 0x23c]
cmp esi, dword [ebp - 0x238]
jae 0x10004d85
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x254]
call fcn.10006db0
mov byte [ebp - 4], 0x21
cmp byte [esi + 0x18], 0
je 0x10004d55
mov edx, 0x1005beec
lea ecx, [ebp - 0x254]
call fcn.1002dff0
mov edx, 0x1005beec
lea ecx, [ebp - 0x254]
call fcn.1002e090
mov ebx, dword [ebp - 0x290]
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x274], 0
push eax
lea ecx, [ebx + 0xc]
call fcn.10007940
mov ecx, dword [ebx + 0xc]
mov eax, ecx
mov edi, dword [ebp - 0x274]
cmp edi, ecx
je 0x10004b7f
cmp dword [edi + 0x24], 8
lea edx, [edi + 0x10]
jb 0x10004b4b
mov edx, dword [edi + 0x10]
push dword [edi + 0x20]
cmp dword [ebp - 0x240], 8
lea ecx, [ebp - 0x254]
push edx
cmovae ecx, dword [ebp - 0x254]
mov edx, dword [ebp - 0x244]
call fcn.1000e0e0
add esp, 8
test eax, eax
js 0x10004b7a
mov eax, dword [ebx + 0xc]
jmp 0x10004b81
mov ecx, dword [ebx + 0xc]
mov eax, ecx
mov edi, ecx
cmp edi, eax
je 0x10004ba9
lea eax, [edi + 0x28]
lea ecx, [ebp - 0x254]
cmp ecx, eax
je 0x10004d55
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x10004ba0
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
jmp 0x10004d4a
cmp dword [ebp - 0x240], 8
lea ebx, [ebp - 0x254]
mov ecx, dword [0x10083388]
cmovae ebx, dword [ebp - 0x254]
mov edi, dword [0x10083384]
mov dword [ebp - 0x288], ecx
cmp edi, ecx
je 0x10004d32
mov edx, dword [edi]
test ebx, ebx
jne 0x10004be4
test edx, edx
sete al
jmp 0x10004bf5
test edx, edx
je 0x10004bf9
mov ecx, ebx
call fcn.1002dee0
mov ecx, dword [ebp - 0x288]
test al, al
jne 0x10004c00
add edi, 8
cmp edi, ecx
jne 0x10004bd7
cmp edi, dword [0x10083388]
je 0x10004d32
cmp dword [edi + 4], 0xffffffff
je 0x10004d55
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x26c]
call fcn.10008150
mov byte [ebp - 4], 0x26
mov ecx, dword [edi + 4]
cmp ecx, 0x26
jne 0x10004ca2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.1002fca0
test al, al
je 0x10004c9f
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push str.ProgramW6432
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x10004cad
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x26c]
call fcn.100082a0
jmp 0x10004cad
mov ecx, dword [edi + 4]
lea edx, [ebp - 0x26c]
call fcn.10035e80
lea ecx, [ebp - 0x26c]
call fcn.10006820
test al, al
jne 0x10004d21
mov edx, 1
lea ecx, [ebp - 0x26c]
call fcn.10035a20
mov edx, 0x20
lea ecx, [ebp - 0x26c]
call fcn.10035a20
mov edx, 0x40000000
lea ecx, [ebp - 0x26c]
call fcn.10035a20
mov ecx, dword [ebp - 0x290]
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ecx + 0xc]
call fcn.100061e0
mov ecx, eax
call fcn.10006ac0
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x254]
call fcn.10006ac0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x26c]
call fcn.10006b00
jmp 0x10004d55
lea eax, [ebp - 0x254]
cmp eax, esi
je 0x10004d55
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x10004d46
mov eax, dword [esi]
push dword [esi + 0x10]
push eax
lea ecx, [ebp - 0x254]
call fcn.100082e0
mov ecx, dword [ebp - 0x28c]
lea eax, [ebp - 0x254]
push eax
call fcn.10008490
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x254]
call fcn.10006b00
add esi, 0x1c
cmp esi, dword [ebp - 0x238]
jb 0x10004ad0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.100073f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x230]
call fcn.10006b00
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10046cee
mov esp, ebp
pop ebp
ret 8