Function at 0x447e30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b94c2
mov eax, dword fs:[0]
push eax
mov eax, 0x310c
call fcn.004b14f0
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x3108], ebx
push 0x48
mov dword [ebp - 0x310c], esi
mov dword [ebp - 0x30f0], ebx
call sub.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
cmp eax, ebx
je 0x448f38
mov dword [ebp - 0x30f4], eax
mov dword [eax], eax
mov eax, dword [ebp - 0x30f4]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x30f4]
mov dword [eax + 8], eax
mov eax, dword [ebp - 0x30f4]
mov byte [eax + 0x44], 1
mov ecx, dword [ebp - 0x30f4]
mov byte [ecx + 0x45], 1
push 0x206
lea eax, [ebp - 0x1a76]
xor edx, edx
push ebx
mov edi, 1
push eax
mov dword [ebp - 4], edi
mov word [ebp - 0x1a78], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x216]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x218], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x2ec6]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x2ec8], ax
call sub.MSVCR100.dll_memset
push 0x206
lea eax, [ebp - 0x1256]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x1258], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x1c7e]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x1c80], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x1666]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x1668], ax
call sub.MSVCR100.dll_memset
add esp, 0x48
push 0x206
lea eax, [ebp - 0x1e86]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x1e88], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x26a6]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x26a8], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x208e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x2090], ax
call sub.MSVCR100.dll_memset
xor edx, edx
push 0x206
mov word [ebp - 0x24a0], dx
push ebx
lea eax, [ebp - 0x249e]
push eax
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x28ae]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x28b0], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x2cbe]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x2cc0], ax
call sub.MSVCR100.dll_memset
add esp, 0x48
push 0x206
lea eax, [ebp - 0x30ce]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x30d0], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x626]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x628], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x2ab6]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x2ab8], ax
call sub.MSVCR100.dll_memset
push 0x206
lea eax, [ebp - 0x2296]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x2298], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0x41e]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x420], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0x145e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x1460], ax
call sub.MSVCR100.dll_memset
add esp, 0x48
push 0x206
lea eax, [ebp - 0x82e]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x830], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0xa36]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0xa38], cx
call sub.MSVCR100.dll_memset
push 0x206
xor eax, eax
push ebx
lea ecx, [ebp - 0x186e]
mov word [ebp - 0x1870], ax
push ecx
call sub.MSVCR100.dll_memset
push 0x206
lea eax, [ebp - 0x104e]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x1050], dx
call sub.MSVCR100.dll_memset
push 0x206
lea edx, [ebp - 0xe46]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0xe48], cx
call sub.MSVCR100.dll_memset
push 0x206
lea ecx, [ebp - 0xc3e]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0xc40], ax
call sub.MSVCR100.dll_memset
add esp, 0x48
push 0x104
lea edx, [ebp - 0x1a78]
push edx
push edi
push ebx
push edi
call fcn.0043baf0
test eax, eax
js 0x448ed2
push 0x104
lea eax, [ebp - 0x218]
push eax
push edi
push ebx
push 2
call fcn.0043baf0
test eax, eax
js 0x448ed2
push 0x104
lea ecx, [ebp - 0x2ec8]
push ecx
push edi
push 0xffffffffffffffff
push 2
call fcn.0043baf0
test eax, eax
js 0x448ed2
push 0x4c6904
lea ecx, [ebp - 0x30e4]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.templates_newfile.wps
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 3
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
mov edi, dword [sym.imp.ksolite.dll_class_QString___cdecl_krt::i18n::getFilePath_class_QString_const___class_QString_const__]
lea edx, [ebp - 0x30e4]
push edx
lea eax, [ebp - 0x30e8]
push eax
lea ecx, [ebp - 0x30d4]
push ecx
mov byte [ebp - 4], 4
call edi
add esp, 0xc
mov ebx, dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
mov ecx, eax
mov byte [ebp - 4], 5
call ebx
mov esi, dword [sym.imp.MSVCR100.dll_wcscpy_s]
push eax
lea edx, [ebp - 0x2090]
push 0x104
push edx
call esi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 4
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 3
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 0x4c6904
lea ecx, [ebp - 0x30e8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.templates_newfile.dps
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 6
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
lea eax, [ebp - 0x30e8]
push eax
lea ecx, [ebp - 0x30e4]
push ecx
lea edx, [ebp - 0x30d4]
push edx
mov byte [ebp - 4], 7
call edi
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call ebx
push eax
lea eax, [ebp - 0x24a0]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 7
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 6
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 0x4c6904
lea ecx, [ebp - 0x30e8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.templates_newfile.pptx
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 9
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
lea ecx, [ebp - 0x30e8]
push ecx
lea edx, [ebp - 0x30e4]
push edx
lea eax, [ebp - 0x30d4]
push eax
mov byte [ebp - 4], 0xa
call edi
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xb
call ebx
push eax
lea ecx, [ebp - 0x28b0]
push 0x104
push ecx
call esi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 0xa
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 9
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 0x4c6904
lea ecx, [ebp - 0x30e8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.templates_newfile.et
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0xc
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
lea edx, [ebp - 0x30e8]
push edx
lea eax, [ebp - 0x30e4]
push eax
lea ecx, [ebp - 0x30d4]
push ecx
mov byte [ebp - 4], 0xd
call edi
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0xe
call ebx
push eax
lea edx, [ebp - 0x2cc0]
push 0x104
push edx
call esi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 0xd
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0xc
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 0x4c6904
lea ecx, [ebp - 0x30e8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.templates_newfile.xlsx
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0xf
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x30e8]
push eax
lea ecx, [ebp - 0x30e4]
push ecx
lea edx, [ebp - 0x30d4]
push edx
call edi
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x11
call ebx
push eax
lea eax, [ebp - 0x30d0]
push 0x104
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 0x10
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0xf
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 3
push 0x104
lea ecx, [ebp - 0x628]
push ecx
push 0
push 4
call fcn.0043cd90
push 3
push 0x104
lea edx, [ebp - 0x2ab8]
push edx
push 0
push 5
call fcn.0043cd90
push 0x104
lea eax, [ebp - 0x2298]
push eax
push 1
push 0
push 0xf
call fcn.0043baf0
mov edi, dword [sym.imp.MSVCR100.dll_wcscat_s]
push 0x4c7780
lea ecx, [ebp - 0x218]
push 0x104
push ecx
call edi
push 0x4c7780
lea edx, [ebp - 0x1a78]
push 0x104
push edx
call edi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1258]
push 0x104
push ecx
call esi
push 0x4c7da0
lea edx, [ebp - 0x1258]
push 0x104
push edx
call edi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1c80]
push 0x104
push ecx
call esi
push 0x4c7d90
lea edx, [ebp - 0x1c80]
push 0x104
push edx
call edi
add esp, 0x48
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1668]
push 0x104
push ecx
call esi
push 0x4c7d80
lea edx, [ebp - 0x1668]
push 0x104
push edx
call edi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1870]
push 0x104
push ecx
call esi
push str.wpsicon.dll
lea edx, [ebp - 0x1870]
push 0x104
push edx
call edi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xe48]
push 0x104
push ecx
call esi
push str.wppicon.dll
lea edx, [ebp - 0xe48]
push 0x104
push edx
call edi
add esp, 0x48
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1050]
push 0x104
push ecx
call esi
push str.eticon.dll
lea edx, [ebp - 0x1050]
push 0x104
push edx
call edi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xc40]
push 0x104
push ecx
call esi
push str.wpsofficeicon.dll
lea edx, [ebp - 0xc40]
push 0x104
push edx
call edi
lea eax, [ebp - 0x30d4]
push eax
call dword [sym.imp.ksolite.dll_class_QString___cdecl_krt::dirs::launchExePath_void_]
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x12
call ebx
push eax
lea ecx, [ebp - 0x1e88]
push 0x104
push ecx
call edi
add esp, 0xc
lea ecx, [ebp - 0x30d4]
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x1460]
push 0x104
push eax
call esi
push str.wpsapi.dll
push 0x104
lea ecx, [ebp - 0x1460]
push ecx
call edi
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x830]
push 0x104
push eax
call esi
push str.etapi.dll
lea ecx, [ebp - 0x830]
push 0x104
push ecx
call edi
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0xa38]
push 0x104
push eax
call esi
push str.wppapi.dll
lea ecx, [ebp - 0xa38]
push 0x104
push ecx
call edi
add esp, 0x48
push 0x4c6904
lea ecx, [ebp - 0x30e8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
push str.resourcekseeEqnEdit.exe
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0x13
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_char_const__]
lea edx, [ebp - 0x30e8]
push edx
lea eax, [ebp - 0x30e4]
push eax
lea ecx, [ebp - 0x3104]
push ecx
mov byte [ebp - 4], 0x14
call dword [sym.imp.ksolite.dll_class_QString___cdecl_krt::i18n::getFilePath_class_QString_const___class_QString_const__]
add esp, 0xc
lea ecx, [ebp - 0x30e4]
mov byte [ebp - 4], 0x16
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x30e8]
mov byte [ebp - 4], 0x17
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x3104]
call ebx
push eax
lea edx, [ebp - 0x26a8]
push 0x104
push edx
call esi
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x420]
push 0x104
push ecx
call esi
push str.Microsoft_OfficeOffice_
lea edx, [ebp - 0x420]
push 0x104
push edx
call edi
lea eax, [ebp - 0x420]
push eax
call fcn.004369d0
add esp, 0x28
lea ecx, [ebp - 0x3100]
push ecx
mov dword [ebp - 0x3100], 0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push eax
push 2
push 2
push 0x4d40e4
call dword [sym.imp.OLEAUT32.dll_LHashValOfNameSys]
push 0
lea eax, [ebp - 0x30d8]
lea edx, [ebp - 0x1258]
push eax
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSAPP
mov dword [ebp - 0x30d4], edx
call fcn.004475a0
push eax
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
push 0
lea eax, [ebp - 0x30d8]
lea edx, [ebp - 0x1c80]
push eax
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.ETAPP
mov dword [ebp - 0x30d4], edx
call fcn.004475a0
push eax
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
push 0
lea eax, [ebp - 0x30d8]
lea edx, [ebp - 0x1668]
push eax
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPPAPP
mov dword [ebp - 0x30d4], edx
call fcn.004475a0
push eax
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
push 0
lea edx, [ebp - 0x30d8]
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSOFFICE_WPS_CMD
mov dword [ebp - 0x30d4], str._prometheus__wps
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
push 0
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSOFFICE_ET_CMD
mov dword [ebp - 0x30d4], str._prometheus__et
call fcn.004475a0
push eax
lea edx, [ebp - 0x30d8]
push edx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
push 0
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSOFFICE_WPP_CMD
mov dword [ebp - 0x30d4], str._prometheus__wpp
call fcn.004475a0
push eax
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
mov dword [ebp - 0x30d8], str.WPSOFFICE_PDF_CMD
mov dword [ebp - 0x30d4], str._prometheus__pdf
push 0
lea edx, [ebp - 0x30d8]
push edx
lea ecx, [ebp - 0x30f8]
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x1e88]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSOFFICE_MODULE
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x26a8]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.KSEEAPP
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x2ec8]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._kso_dir_office_lng_
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x1a78]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._kso_dir_root_
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x2090]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.SHELLNEWPATH_WPS
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x24a0]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
mov dword [ebp - 0x30d8], str.SHELLNEWPATH_DPS
push edx
lea ecx, [ebp - 0x30f8]
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x28b0]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.SHELLNEWPATH_PPTX
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x2cc0]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.SHELLNEWPATH_ET
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x30d0]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.SHELLNEWPATH_XLSX
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x628]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._kso_dir_programfiles
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x2ab8]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._kso_dir_commonfils
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x2298]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._kso_dir_startup
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x420]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str._mso_dir_root_
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
mov eax, dword [ebp - 0x3100]
test eax, eax
je 0x448caf
push 0
lea ecx, [ebp - 0x30d8]
push ecx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.mso10dll_path
mov dword [ebp - 0x30d4], eax
call fcn.004475a0
push eax
lea edx, [ebp - 0x30d8]
push edx
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
mov eax, dword [ebp - 0x3100]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x1460]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.wpsapidll_path
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x830]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.etapidll_path
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0xa38]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.wppapidll_path
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0xc40]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPSOFFICE_ICONS
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x1870]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPS_ICONS
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0xe48]
push 0
lea edx, [ebp - 0x30d8]
mov dword [ebp - 0x30d4], ecx
push edx
lea ecx, [ebp - 0x30f8]
mov dword [ebp - 0x30d8], str.WPP_ICONS
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
lea ecx, [ebp - 0x1050]
mov dword [ebp - 0x30d8], str.ET_ICONS
mov dword [ebp - 0x30d4], ecx
push 0
lea edx, [ebp - 0x30d8]
push edx
lea ecx, [ebp - 0x30f8]
call fcn.004475a0
push eax
lea eax, [ebp - 0x30d8]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.00446d90
call dword [sym.imp.ksolite.dll_bool___cdecl_krt::product::isEnterprise_void_]
test al, al
jne 0x448e9b
lea ecx, [ebp - 0x30e0]
push ecx
call fcn.004866a0
add esp, 4
mov eax, dword [ebp - 0x30dc]
mov ecx, dword [eax]
push eax
push ecx
lea ecx, [ebp - 0x30f8]
mov byte [ebp - 4], 0x18
call fcn.00447db0
lea ecx, [ebp - 0x30e0]
mov byte [ebp - 4], 0x17
call fcn.00447820
mov esi, dword [ebp - 0x310c]
lea edx, [ebp - 0x30f8]
push edx
mov ecx, esi
call fcn.00447330
lea ecx, [ebp - 0x3104]
mov dword [ebp - 0x3108], 1
mov byte [ebp - 4], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov dword [ebp - 4], 0x19
jmp 0x448eed
lea edx, [ebp - 0x30f8]
push edx
mov ecx, esi
call fcn.00447330
mov dword [ebp - 0x3108], edi
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x30f4]
mov ecx, dword [eax]
push eax
push ecx
lea eax, [ebp - 0x30fc]
push eax
lea ecx, [ebp - 0x30f8]
call fcn.004471b0
mov ecx, dword [ebp - 0x30f4]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0x30fc]
push edx
lea ecx, [ebp - 0x3118]
mov dword [ebp - 0x30fc], ebx
call dword [sym.imp.MSVCR100.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
push 0x53bd18
lea eax, [ebp - 0x3118]
push eax
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call sub.MSVCR100.dll__CxxThrowException
int3