Function at 0x499c20
Capabilities:
Delete file
Enumerate files on windows
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a6147
mov eax, dword fs:[0]
push eax
mov eax, 0x1d54
call fcn.0055cc70
mov eax, dword [0x639354]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1d58], ebx
push 0x11
push 1
mov ecx, 0x6420c8
xor edi, edi
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499c7d
push dword [ebx + 0x28]
push 0x11
push 1
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x499ca6
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b80
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048f590
push 0x11
push 2
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499cc7
push dword [ebx + 0x28]
push 0x11
push 2
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x499cf0
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b80
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048c100
push 0x11
push 3
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499d11
push dword [ebx + 0x28]
push 0x11
push 3
call eax
add esp, 0xc
mov eax, dword [ebx + 0x1c]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x499d3a
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b80
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048e490
push 0x11
push 4
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499d5b
push dword [ebx + 0x28]
push 0x11
push 4
call eax
add esp, 0xc
mov ecx, ebx
call fcn.0048dbb0
mov ecx, ebx
call fcn.0048e760
push 0x11
push 5
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499d8a
push dword [ebx + 0x28]
push 0x11
push 5
call eax
add esp, 0xc
mov ecx, ebx
call fcn.0048d8d0
mov ecx, ebx
call fcn.0048f880
push 0x11
push 6
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499db9
push dword [ebx + 0x28]
push 0x11
push 6
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xa38]
push 0
push eax
call fcn.00560a80
push dword [ebx + 0x10]
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.0056f8ec
push str.office6cfgsoeminfo
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0xa38]
push 1
push eax
call fcn.0047a3e0
add esp, 0x34
mov ecx, 1
test eax, eax
cmove edi, ecx
mov ecx, 0x6420c8
push 0x11
push 7
mov dword [ebp - 0x1d40], edi
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499e3c
push dword [ebx + 0x28]
push 0x11
push 7
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xc40]
push 0
push eax
call fcn.00560a80
push dword [ebx + 0x10]
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.0056f8ec
push 0x5c61f4
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0xc40]
push 1
push eax
call fcn.0047a3e0
add esp, 0x34
test eax, eax
jne 0x499e99
inc edi
mov dword [ebp - 0x1d40], edi
push 0x11
push 8
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499eba
push dword [ebx + 0x28]
push 0x11
push 8
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.00560a80
push dword [ebx + 0x10]
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.0056f8ec
push str.utility_backup
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0x830]
push 1
push eax
call fcn.0047a3e0
push 1
push 0
push dword [ebx + 0x10]
mov esi, eax
call fcn.0047fb80
add esp, 0x40
lea eax, [ebp - 0x830]
push eax
push str.1749_tKUninstall::RunUninstall_tremove_folder__ws
push str.D:pub_bh8h_rc_bug_mas_v12_2409Coding_support_newsetup_srccommonappKUninstallKUninstall.cpp
push str._INFO_
push 0x641cc8
call fcn.0046b730
add esp, 0x14
test esi, esi
jne 0x499f48
inc edi
mov dword [ebp - 0x1d40], edi
push 0x11
push 9
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499f69
push dword [ebx + 0x28]
push 0x11
push 9
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x628]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str.ShellNew
lea eax, [ebp - 0x628]
push 0x104
push eax
call fcn.0056f877
push 0x208
lea eax, [ebp - 0xe48]
push 0
push eax
call fcn.00560a80
push 0x208
lea eax, [ebp - 0x1050]
push 0
push eax
call fcn.00560a80
push 0x208
lea eax, [ebp - 0x1258]
push 0
push eax
call fcn.00560a80
push 0x208
lea eax, [ebp - 0x1460]
push 0
push eax
call fcn.00560a80
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.0056f8ec
push str._newfile.wps
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.0056f877
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.0056f8ec
push str._newfile.et
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.0056f877
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.0056f8ec
push str._newfile.dps
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.0056f877
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.0056f8ec
push str._newfile.xlsx
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.0056f877
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f8ec
push str._newfile.pptx
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f877
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xe48]
add esp, 0x30
push eax
call esi
test eax, eax
jne 0x49a10f
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1050]
push eax
call esi
test eax, eax
jne 0x49a123
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1258]
push eax
call esi
test eax, eax
jne 0x49a137
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1460]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push 1
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0047fb80
push 0x208
lea eax, [ebp - 0x1668]
push 0
push eax
call fcn.00560a80
add esp, 0x18
lea eax, [ebp - 0x1d44]
mov ecx, ebx
push eax
call fcn.00495330
push dword [eax]
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.0056f8ec
mov edx, dword [ebp - 0x1d44]
or edi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a1b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftintranetdomain
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0x1668]
push 1
push eax
call fcn.0047a3e0
add esp, 0x1c
mov ecx, 0x6420c8
push 0x11
push 0xa
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a1ff
push dword [ebx + 0x28]
push 0x11
push 0xa
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49a3c7
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x1d44]
mov ecx, ebx
push eax
call fcn.00495330
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f8ec
mov edx, dword [ebp - 0x1d44]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a260
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftKRM
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.0047a3e0
add esp, 0x1c
test eax, eax
jne 0x49a295
inc dword [ebp - 0x1d40]
cmp dword [ebx + 0x20], 0
jne 0x49a3c7
push 1
push 0
lea eax, [ebp - 0x1ac0]
push 2
push eax
call fcn.004a0560
add esp, 0x10
lea ecx, [ebp - 0x1ad8]
mov dword [ebp - 4], 0
push ecx
mov ecx, eax
call fcn.005270b0
push 0x1e
push str.promeappscacheLocal_Storage
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0043ec10
mov edx, eax
mov dword [ebp - 0x1aa8], 0
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a94], 0
mov ecx, dword [edx]
mov dword [ebp - 0x1aa8], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 0x1aa4], ecx
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1aa0], ecx
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1a9c], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1a98], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x1a94], eax
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
lea ecx, [ebp - 0x1ad8]
call fcn.0042ab30
lea ecx, [ebp - 0x1ac0]
mov byte [ebp - 4], 4
call fcn.0042ab30
cmp dword [ebp - 0x1a94], 8
lea eax, [ebp - 0x1aa8]
push 0
cmovae eax, dword [ebp - 0x1aa8]
push 1
push 1
push eax
call fcn.0047a3e0
mov edx, dword [ebp - 0x1a94]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x49a3c7
mov ecx, dword [ebp - 0x1aa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49a3bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49bb96
push edx
push ecx
call fcn.0055c524
add esp, 8
push 0x11
push 0xb
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a3e8
push dword [ebx + 0x28]
push 0x11
push 0xb
call eax
add esp, 0xc
push 1
push 0
lea eax, [ebp - 0x1ad8]
push 2
push eax
call fcn.004a0560
add esp, 0x10
lea ecx, [ebp - 0x1ac0]
mov dword [ebp - 4], 5
push ecx
mov ecx, eax
call fcn.005270b0
mov esi, eax
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 6
jb 0x49a420
mov esi, dword [esi]
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d44], eax
mov byte [ebp - 4], 7
test esi, esi
je 0x49a474
test esi, 0xffff0000
jne 0x49a45e
movzx eax, si
lea ecx, [ebp - 0x1d44]
push eax
call fcn.00429d90
jmp 0x49a483
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49a463
sub ecx, edx
sar ecx, 1
jmp 0x49a476
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x1d44]
call fcn.0042a060
mov edx, dword [ebp - 0x1aac]
mov byte [ebp - 4], 9
cmp edx, 8
jb 0x49a4c7
mov ecx, dword [ebp - 0x1ac0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49a4bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49bba5
push edx
push ecx
call fcn.0055c524
add esp, 8
xor eax, eax
mov dword [ebp - 0x1ab0], 0
mov dword [ebp - 0x1aac], 7
mov word [ebp - 0x1ac0], ax
mov edx, dword [ebp - 0x1ac4]
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x49a528
mov ecx, dword [ebp - 0x1ad8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49a51e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49bba5
push edx
push ecx
call fcn.0055c524
add esp, 8
xor eax, eax
mov dword [ebp - 0x1ac8], 0
mov word [ebp - 0x1ad8], ax
lea eax, [ebp - 0x1d44]
push str.promebrowserHistory
push eax
lea eax, [ebp - 0x1d2c]
mov dword [ebp - 0x1ac4], 7
push eax
call fcn.00429810
push 1
push eax
mov byte [ebp - 4], 0xb
call fcn.00445c60
mov edx, dword [ebp - 0x1d2c]
add esp, 0x14
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a58d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x49a691
push str.promebrowserPreferences
lea eax, [ebp - 0x1d44]
push eax
lea eax, [ebp - 0x1d2c]
push eax
call fcn.00429810
push 1
push eax
mov byte [ebp - 4], 0xc
call fcn.00445c60
mov edx, dword [ebp - 0x1d2c]
add esp, 0x14
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a5df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x49a691
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.00495330
push 0x16
push str.kingsoftofflinecache
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0xd
call fcn.004299d0
mov edi, dword [ebp - 0x1d2c]
push 0
push 1
push 1
push edi
call fcn.0047a3e0
add esp, 0x10
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push 0x15
push str.kingsoftdocsecurity
lea ecx, [ebp - 0x1d30]
mov byte [ebp - 4], 0xe
call fcn.004299d0
mov esi, dword [ebp - 0x1d30]
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49a673
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xa
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a691
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xc
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a6b2
push dword [ebx + 0x28]
push 0x11
push 0xc
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49a751
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.00495330
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f8ec
mov edx, dword [ebp - 0x1d2c]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a713
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftwpslive
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f877
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.0047a3e0
mov esi, dword [ebp - 0x1d40]
add esp, 0x1c
test eax, eax
jne 0x49a757
inc esi
mov dword [ebp - 0x1d40], esi
jmp 0x49a757
mov esi, dword [ebp - 0x1d40]
push 0x11
push 0xd
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a778
push dword [ebx + 0x28]
push 0x11
push 0xd
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49a8f6
cmp dword [ebx + 0xe8], 0
jne 0x49a8f6
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push 0x18
push str.kingsoftoffice6_backup
lea ecx, [ebp - 0x1d30]
mov byte [ebp - 4], 0xf
call fcn.004299d0
mov edi, dword [ebp - 0x1d30]
push 0
push 1
push 0
push edi
call fcn.0047a3e0
add esp, 0x10
test eax, eax
jne 0x49a7d3
inc esi
mov dword [ebp - 0x1d40], esi
cmp dword [ebx + 0xec], 0
jne 0x49a8d8
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bbaa
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, 0x5c2820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x49a81e
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x49a82a
push 1
push 0x5c2820
call fcn.0042a060
push 0
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x11
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1d48], esi
mov eax, dword [ebx + 0xd8]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x1a84]
push eax
call fcn.00480780
add esp, 0x10
mov edx, dword [ebp - 0x1d2c]
or eax, 0xffffffff
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a888
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebx + 0xd4]
push eax
lea ecx, [ebp - 0x1a84]
call fcn.004a1460
mov esi, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0x1a80]
cmp esi, ecx
je 0x49a8cd
lea ebx, [ebx]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x49a8c6
push esi
mov ecx, ebx
call fcn.0049eb20
mov ecx, dword [ebp - 0x1a80]
add esi, 4
cmp esi, ecx
jne 0x49a8b0
lea ecx, [ebp - 0x1a84]
call fcn.00429720
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xa
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a8f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xe
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a917
push dword [ebx + 0x28]
push 0x11
push 0xe
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49ad92
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.00495330
push dword [eax]
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.0056f8ec
mov edx, dword [ebp - 0x1d2c]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a978
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftoffice6
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.0056f877
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f8ec
push 0x5bd660
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056f877
add esp, 0x30
lea eax, [ebp - 0x1d28]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1d30], eax
cmp eax, 0xffffffff
je 0x49ad92
mov esi, eax
jmp 0x49aa00
test byte [ebp - 0x1d28], 0x10
je 0x49ac6d
mov dword [ebp - 0x1d2c], 0
xor esi, esi
lea esp, [esp]
push dword [esi + 0x613500]
lea eax, [ebp - 0x1cfc]
push eax
call fcn.0056b422
add esp, 8
test eax, eax
je 0x49aa43
add esi, 4
cmp esi, 0x10
jb 0x49aa20
jmp 0x49aa4d
mov dword [ebp - 0x1d2c], 1
mov esi, dword [ebx + 0x108]
lea ecx, [ebp - 0x1aa8]
push 0x23
xor eax, eax
mov dword [ebp - 0x1aa8], 0
push str.Setup_EnableSavingAdditionalFolders
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a94], 7
mov word [ebp - 0x1aa8], ax
call fcn.0042e330
lea eax, [ebp - 0x1aa8]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x1a90]
mov ecx, esi
push eax
call fcn.00442f00
cmp dword [eax + 0x14], 8
jb 0x49aaad
mov eax, dword [eax]
push 0x5bb494
push eax
call fcn.0056b422
mov edx, dword [ebp - 0x1a7c]
add esp, 8
test eax, eax
sete byte [ebp - 0x1d49]
cmp edx, 8
jb 0x49ab04
mov ecx, dword [ebp - 0x1a90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49aafa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49bb96
push edx
push ecx
call fcn.0055c524
add esp, 8
mov edx, dword [ebp - 0x1a94]
xor eax, eax
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 7
mov word [ebp - 0x1a90], ax
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x49ab65
mov ecx, dword [ebp - 0x1aa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49ab5b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49bb96
push edx
push ecx
call fcn.0055c524
add esp, 8
cmp byte [ebp - 0x1d49], 0
je 0x49ab95
xor esi, esi
push dword [esi + 0x613510]
lea eax, [ebp - 0x1cfc]
push eax
call fcn.0056b422
add esp, 8
test eax, eax
je 0x49ad6f
add esi, 4
cmp esi, 4
jb 0x49ab70
cmp dword [ebp - 0x1d2c], 0
jne 0x49ad6f
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x15
test eax, 0xffff0000
jne 0x49abe1
movzx eax, ax
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.00429d90
jmp 0x49ac12
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49abf0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.0042a060
push 1
push 0x5b9804
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x16
call fcn.004299d0
lea ecx, [ebp - 0x1cfc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49ac31
sub ecx, edx
lea eax, [ebp - 0x1cfc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.004299d0
mov esi, dword [ebp - 0x1d2c]
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
jmp 0x49ad4a
lea eax, [ebp - 0x1cfc]
push str.CUSTOM.DIC
push eax
call fcn.0056b422
add esp, 8
test eax, eax
je 0x49ad75
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x17
test eax, 0xffff0000
jne 0x49acc8
movzx eax, ax
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.00429d90
jmp 0x49acf3
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49acd1
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.0042a060
push 1
push 0x5b9804
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x18
call fcn.004299d0
lea ecx, [ebp - 0x1cfc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49ad12
sub ecx, edx
lea eax, [ebp - 0x1cfc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.004299d0
mov esi, dword [ebp - 0x1d2c]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x49ad54
inc dword [ebp - 0x1d40]
mov eax, edi
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49ad6f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d30]
lea eax, [ebp - 0x1d28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x49aa00
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x11
push 0xf
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49adb3
push dword [ebx + 0x28]
push 0x11
push 0xf
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49b864
mov dword [ebp - 0x1d3c], 0
mov dword [ebp - 0x1d38], 0
mov dword [ebp - 0x1d34], 0
lea eax, [ebp - 0x1d30]
mov byte [ebp - 4], 0x19
push eax
mov ecx, ebx
call fcn.00495330
push str.Kingsoftdocsecurity
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1a
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1b
cmp esi, dword [ebp - 0x1d34]
je 0x49ae34
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49ae41
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ae5e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ae7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoftkyunkit
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1c
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1d
cmp esi, dword [ebp - 0x1d34]
je 0x49aed4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49aee1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49aefe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49af1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoft_nse
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1e
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1f
cmp esi, dword [ebp - 0x1d34]
je 0x49af74
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49af81
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49af9e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49afbf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoftwpspdf
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x20
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x21
cmp esi, dword [ebp - 0x1d34]
je 0x49b014
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b021
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b03e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b05f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoftpersonalofflinecache
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x22
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x23
cmp esi, dword [ebp - 0x1d34]
je 0x49b0b4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b0c1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b0de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b0ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoft_startmenu
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x24
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x25
cmp esi, dword [ebp - 0x1d34]
je 0x49b154
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b161
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b17e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b19f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoft_taskbar
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x26
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x27
cmp esi, dword [ebp - 0x1d34]
je 0x49b1f4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b201
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b21e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b23f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00495330
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x28
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x29
cmp esi, dword [ebp - 0x1d34]
je 0x49b294
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b2a1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b2be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b2df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00494d80
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2a
push eax
call fcn.00429810
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x2b
cmp esi, dword [ebp - 0x1d34]
je 0x49b334
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49b341
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.004293a0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b35e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b37f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d3c]
cmp esi, dword [ebp - 0x1d38]
je 0x49b3ab
lea ecx, [ecx]
push 0
push 1
push 0
push dword [esi]
call fcn.0047a3e0
add esi, 4
add esp, 0x10
cmp esi, dword [ebp - 0x1d38]
jne 0x49b390
push 0x18
mov dword [ebp - 0x1d54], 0
mov dword [ebp - 0x1d50], 0
call fcn.0055c4f4
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov byte [ebp - 4], 0x2d
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, str.XLSTART
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x49b434
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x49b440
push 7
push str.XLSTART
call fcn.0042a060
mov eax, dword [ebp - 0x1a80]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x1d30], eax
cmp eax, dword [ebp - 0x1a7c]
je 0x49b47e
mov esi, dword [ebp - 0x1d2c]
lea eax, [esi - 0x10]
push eax
call fcn.00429b80
mov ecx, dword [ebp - 0x1d30]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1a80], 4
jmp 0x49b497
lea ecx, [ebp - 0x1d2c]
push ecx
push eax
lea ecx, [ebp - 0x1a84]
call fcn.004293a0
mov esi, dword [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2d
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49b4b2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0xf0], 0
je 0x49b57b
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x49bb9b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, str.addons
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x49b4fd
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x49b509
push 6
push str.addons
call fcn.0042a060
mov eax, dword [ebp - 0x1a80]
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x1d30], eax
cmp eax, dword [ebp - 0x1a7c]
je 0x49b547
mov esi, dword [ebp - 0x1d2c]
lea eax, [esi - 0x10]
push eax
call fcn.00429b80
mov ecx, dword [ebp - 0x1d30]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1a80], 4
jmp 0x49b560
lea ecx, [ebp - 0x1d2c]
push ecx
push eax
lea ecx, [ebp - 0x1a84]
call fcn.004293a0
mov esi, dword [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2d
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49b57b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d48]
mov ecx, ebx
push eax
call fcn.00495330
push str.Kingsoftwps
push eax
lea eax, [ebp - 0x1d30]
mov byte [ebp - 4], 0x32
push eax
call fcn.00429810
mov eax, dword [eax]
sub eax, 0x10
mov byte [ebp - 4], 0x33
push eax
call fcn.00429b80
add eax, 0x10
add esp, 0x10
mov dword [ebp - 0x1aa0], eax
lea eax, [ebp - 0x1a84]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x1a9c]
call fcn.00444660
cmp dword [ebp - 0x1d50], 0xaaaaaaa
mov eax, dword [ebp - 0x1d54]
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x1d2c], eax
je 0x49bbb4
lea eax, [ebp - 0x1d54]
mov dword [ebp - 0x1d60], eax
push 1
mov ecx, eax
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x1d5c], 0
call fcn.0049f770
mov ecx, dword [ebp - 0x1aa0]
mov esi, eax
add ecx, 0xfffffff0
mov dword [ebp - 0x1d5c], esi
push ecx
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [esi + 8], eax
mov ecx, dword [ebp - 0x1a98]
mov eax, dword [ebp - 0x1a9c]
mov edx, dword [ebp - 0x1a94]
mov dword [ebp - 0x1a94], 0
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a9c], 0
mov dword [esi + 0x10], ecx
mov ecx, dword [ebp - 0x1d2c]
mov dword [esi + 0xc], eax
mov dword [esi + 0x14], edx
inc dword [ebp - 0x1d50]
mov eax, dword [ecx + 4]
mov dword [esi], ecx
mov dword [esi + 4], eax
mov dword [ecx + 4], esi
lea ecx, [ebp - 0x1a9c]
mov dword [eax], esi
call fcn.00429720
mov edx, dword [ebp - 0x1aa0]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b6ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b6ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d48]
mov eax, edi
mov byte [ebp - 4], 0x2d
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b6eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1d54]
mov esi, dword [ecx]
cmp esi, ecx
je 0x49b716
lea eax, [esi + 0xc]
push eax
push 1
push dword [esi + 8]
call fcn.0047a520
mov eax, dword [esi]
add esp, 0xc
mov ecx, dword [ebp - 0x1d54]
mov esi, eax
cmp eax, ecx
jne 0x49b6f7
mov esi, dword [ebp - 0x1a84]
test esi, esi
je 0x49b798
mov eax, dword [ebp - 0x1a80]
cmp esi, eax
je 0x49b75c
mov ebx, eax
lea esp, [esp]
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b749
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x49b730
mov esi, dword [ebp - 0x1a84]
mov ebx, dword [ebp - 0x1d58]
mov eax, dword [ebp - 0x1a7c]
lea ecx, [ebp - 0x1a84]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.0042a2d0
mov ecx, dword [ebp - 0x1d54]
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov eax, dword [ecx + 4]
mov dword [eax], 0
mov esi, dword [ecx]
test esi, esi
je 0x49b7f1
jmp 0x49b7b0
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [ebp - 0x1d48], eax
call fcn.00429720
mov edx, dword [esi + 8]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b7da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
push esi
call fcn.0055c524
mov eax, dword [ebp - 0x1d48]
add esp, 8
mov esi, eax
test eax, eax
jne 0x49b7b0
push 0x18
push dword [ebp - 0x1d54]
call fcn.0055c524
mov esi, dword [ebp - 0x1d3c]
add esp, 8
mov byte [ebp - 4], 0xa
test esi, esi
je 0x49b864
mov eax, dword [ebp - 0x1d38]
cmp esi, eax
je 0x49b84c
mov ebx, eax
jmp 0x49b820
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b839
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x49b820
mov esi, dword [ebp - 0x1d3c]
mov ebx, dword [ebp - 0x1d58]
mov eax, dword [ebp - 0x1d34]
lea ecx, [ebp - 0x1d3c]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.0042a2d0
push 0x11
push 0x10
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49b885
push dword [ebx + 0x28]
push 0x11
push 0x10
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
mov ecx, 0x5b9868
mov eax, 0x5bbd7c
cmove eax, ecx
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.004445b0
mov eax, dword [ebp - 0x1d2c]
lea ecx, [ebp - 0x1d2c]
mov dword [ebp - 0x1a84], 4
mov byte [ebp - 4], 0x37
mov eax, dword [eax - 0xc]
lea eax, [eax*2 + 2]
push eax
mov dword [ebp - 0x1a80], eax
call fcn.0046f8d0
mov dword [ebp - 0x1a7c], eax
mov ecx, ebx
lea eax, [ebp - 0x1a84]
push eax
call fcn.0049bf20
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b907
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.0048d1e0
call fcn.0047de00
test eax, eax
je 0x49b91e
mov ecx, ebx
call fcn.0048ac00
push 0x11
push 0x11
mov ecx, 0x6420c8
call fcn.004bf670
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49b93f
push dword [ebx + 0x28]
push 0x11
push 0x11
call eax
add esp, 0xc
cmp dword [ebx + 0xdc], 0
je 0x49b9bd
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.00495090
mov eax, dword [ebp - 0x1d2c]
lea ecx, [ebp - 0x1d2c]
mov dword [ebp - 0x1a84], 3
mov byte [ebp - 4], 0x38
mov eax, dword [eax - 0xc]
lea eax, [eax*2 + 2]
push eax
mov dword [ebp - 0x1a80], eax
call fcn.0046f8d0
mov dword [ebp - 0x1a7c], eax
mov ecx, ebx
lea eax, [ebp - 0x1a84]
push eax
call fcn.0049bf20
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b9ce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49b9ce
push ecx
push esp
mov ecx, ebx
call fcn.00495090
call fcn.004b4860
add esp, 4
mov ecx, ebx
call fcn.0049f4a0
call fcn.00441c60
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x49ba01
push dword [ebx + 0x8c]
push 0
call esi
push 0
push eax
push dword [ebx + 0xdc]
push 0x67
call fcn.004394c0
add esp, 0x10
call fcn.00441c30
test eax, eax
je 0x49ba23
push 0
push dword [ebx + 0x8c]
push 0
call esi
push eax
push 0
push 0x69
call fcn.004394c0
add esp, 0x10
cmp dword [ebx + 0x20], 0
jne 0x49bb4b
push 0x208
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x1d48]
mov ecx, ebx
push eax
call fcn.00495330
push dword [eax]
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.0056f8ec
mov edx, dword [ebp - 0x1d48]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ba84
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoft
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.0056f877
push 1
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.0047fb80
push 0x208
lea eax, [ebp - 0x1a78]
push 0
push eax
call fcn.00560a80
add esp, 0x24
lea eax, [ebp - 0x1a78]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x1a78]
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.004445b0
push str.kingsoft
push eax
lea eax, [ebp - 0x1d48]
mov byte [ebp - 4], 0x39
push eax
call fcn.00429810
push 1
push 1
push dword [eax]
mov byte [ebp - 4], 0x3a
call fcn.0047fb80
mov edx, dword [ebp - 0x1d48]
add esp, 0x18
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49bb2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49bb4b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.0049e860
mov eax, dword [ebp - 0x1d44]
xor ebx, ebx
cmp dword [ebp - 0x1d40], ebx
sete bl
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x49bb78
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055c3a9
mov esp, ebp
pop ebp
ret
call fcn.0056af64
push 0x80004005
call fcn.00429b60
call fcn.0056af64
push 0x80004005
call fcn.00429b60
push str.list_too_long
call fcn.0055db0b
int3