Function at 0x4903e0
Capabilities:
Delete file
Enumerate files on windows
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59ca46
mov eax, dword fs:[0]
push eax
mov eax, 0x1d34
call fcn.00546790
mov eax, dword [0x62819c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1d1c], ebx
push 0x11
push 1
mov ecx, 0x631c58
xor edi, edi
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49043d
push dword [ebx + 0x28]
push 0x11
push 1
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
cmp dword [eax - 0xc], edi
je 0x490466
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov dword [ebp - 0x1d18], esi
call fcn.004293f0
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.004862b0
push 0x11
push 2
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490487
push dword [ebx + 0x28]
push 0x11
push 2
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
cmp dword [eax - 0xc], edi
je 0x4904b0
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov dword [ebp - 0x1d18], esi
call fcn.004293f0
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00483f90
push 0x11
push 3
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4904d1
push dword [ebx + 0x28]
push 0x11
push 3
call eax
add esp, 0xc
mov eax, dword [ebx + 0x1c]
cmp dword [eax - 0xc], edi
je 0x4904fa
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov dword [ebp - 0x1d18], esi
call fcn.004293f0
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00486050
push 0x11
push 4
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49051b
push dword [ebx + 0x28]
push 0x11
push 4
call eax
add esp, 0xc
mov ecx, ebx
call fcn.00485a40
push 0x11
push 5
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490543
push dword [ebx + 0x28]
push 0x11
push 5
call eax
add esp, 0xc
mov ecx, ebx
call fcn.00485760
push 0x11
push 6
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49056b
push dword [ebx + 0x28]
push 0x11
push 6
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xa38]
push 0
push eax
call fcn.0054b380
push dword [ebx + 0x10]
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.00559d1c
push str.office6cfgsoeminfo
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0xa38]
push 1
push eax
call fcn.00474ee0
add esp, 0x34
mov ecx, 1
test eax, eax
cmove edi, ecx
mov ecx, 0x631c58
push 0x11
push 7
mov dword [ebp - 0x1d14], edi
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4905ee
push dword [ebx + 0x28]
push 0x11
push 7
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xc40]
push 0
push eax
call fcn.0054b380
push dword [ebx + 0x10]
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.00559d1c
push 0x5b5468
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0xc40]
push 1
push eax
call fcn.00474ee0
add esp, 0x34
test eax, eax
jne 0x49064b
inc edi
mov dword [ebp - 0x1d14], edi
push 0x11
push 8
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49066c
push dword [ebx + 0x28]
push 0x11
push 8
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.0054b380
push dword [ebx + 0x10]
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.00559d1c
push str.utility_backup
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0x830]
push 1
push eax
call fcn.00474ee0
push 1
push 0
push dword [ebx + 0x10]
mov esi, eax
call fcn.00479880
add esp, 0x40
lea eax, [ebp - 0x830]
push eax
push str.1680_tKUninstall::RunUninstall_tremove_folder__ws
push str.H:_rc_v11_i18n_20230711_branchCoding_support_newsetup_srccommonappKUninstallKUninstall.cpp
push str._INFO_
push 0x631888
call fcn.004677c0
add esp, 0x14
test esi, esi
jne 0x4906fa
inc edi
mov dword [ebp - 0x1d14], edi
push 0x11
push 9
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49071b
push dword [ebx + 0x28]
push 0x11
push 9
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x628]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str.ShellNew
lea eax, [ebp - 0x628]
push 0x104
push eax
call fcn.00559ca7
push 0x208
lea eax, [ebp - 0xe48]
push 0
push eax
call fcn.0054b380
push 0x208
lea eax, [ebp - 0x1050]
push 0
push eax
call fcn.0054b380
push 0x208
lea eax, [ebp - 0x1258]
push 0
push eax
call fcn.0054b380
push 0x208
lea eax, [ebp - 0x1460]
push 0
push eax
call fcn.0054b380
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0054b380
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.00559d1c
push str._newfile.wps
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.00559ca7
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.00559d1c
push str._newfile.et
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.00559ca7
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.00559d1c
push str._newfile.dps
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.00559ca7
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.00559d1c
push str._newfile.xlsx
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.00559ca7
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559d1c
push str._newfile.pptx
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559ca7
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xe48]
add esp, 0x30
push eax
call esi
test eax, eax
jne 0x4908c1
inc edi
mov dword [ebp - 0x1d14], edi
lea eax, [ebp - 0x1050]
push eax
call esi
test eax, eax
jne 0x4908d5
inc edi
mov dword [ebp - 0x1d14], edi
lea eax, [ebp - 0x1258]
push eax
call esi
test eax, eax
jne 0x4908e9
inc edi
mov dword [ebp - 0x1d14], edi
lea eax, [ebp - 0x1460]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push 1
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.00479880
push 0x208
lea eax, [ebp - 0x1668]
push 0
push eax
call fcn.0054b380
add esp, 0x18
lea eax, [ebp - 0x1d18]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1d18]
or edi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490965
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftintranetdomain
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0x1668]
push 1
push eax
call fcn.00474ee0
add esp, 0x1c
mov ecx, 0x631c58
push 0x11
push 0xa
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4909b1
push dword [ebx + 0x28]
push 0x11
push 0xa
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x490ad3
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x1d18]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1d18]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490a12
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftKRM
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.00474ee0
add esp, 0x1c
test eax, eax
jne 0x490a47
inc dword [ebp - 0x1d14]
cmp dword [ebx + 0x20], 0
jne 0x490ad3
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x1d18]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1d18]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490aa8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Kingsoftwps_addonsdatawin_i386promeappscacheLocal_Storage
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.00474ee0
add esp, 0x1c
push 0x11
push 0xb
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490af4
push dword [ebx + 0x28]
push 0x11
push 0xb
call eax
add esp, 0xc
lea eax, [ebp - 0x1d18]
mov ecx, ebx
push eax
call fcn.0048bb80
push 0x2f
push str.Kingsoftwps_addonsdatawin_i386promebrowser
lea ecx, [ebp - 0x1d18]
mov dword [ebp - 4], 0
call fcn.00429240
push str.History
lea eax, [ebp - 0x1d18]
push eax
lea eax, [ebp - 0x1cfc]
push eax
call fcn.00429080
push 1
push eax
mov byte [ebp - 4], 1
call fcn.00444320
mov edx, dword [ebp - 0x1cfc]
add esp, 0x14
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490b63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x490c6d
push str.Preferences
lea eax, [ebp - 0x1d18]
push eax
lea eax, [ebp - 0x1cfc]
push eax
call fcn.00429080
push 1
push eax
mov byte [ebp - 4], 2
call fcn.00444320
mov edx, dword [ebp - 0x1cfc]
add esp, 0x14
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490bb5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x490c6d
lea eax, [ebp - 0x1cfc]
mov ecx, ebx
push eax
call fcn.0048bb80
push 0x16
push str.kingsoftofflinecache
lea ecx, [ebp - 0x1cfc]
mov byte [ebp - 4], 3
call fcn.00429240
mov edi, dword [ebp - 0x1cfc]
push 0
push 1
push 1
push edi
call fcn.00474ee0
add esp, 0x10
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push 0x15
push str.kingsoftdocsecurity
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 4
call fcn.00429240
mov esi, dword [ebp - 0x1d00]
push 0
push 1
push 1
push esi
call fcn.00474ee0
lea edx, [esi - 0x10]
mov byte [ebp - 4], 3
or esi, 0xffffffff
add esp, 0x10
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490c4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490c6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xc
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490c8e
push dword [ebx + 0x28]
push 0x11
push 0xc
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x490d2d
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x1cfc]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1cfc]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490cef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftwpslive
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559ca7
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.00474ee0
mov esi, dword [ebp - 0x1d14]
add esp, 0x1c
test eax, eax
jne 0x490d33
inc esi
mov dword [ebp - 0x1d14], esi
jmp 0x490d33
mov esi, dword [ebp - 0x1d14]
push 0x11
push 0xd
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490d54
push dword [ebx + 0x28]
push 0x11
push 0xd
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x490ece
cmp dword [ebx + 0xe8], 0
jne 0x490ece
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push 0x18
push str.kingsoftoffice6_backup
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 5
call fcn.00429240
mov edi, dword [ebp - 0x1d00]
push 0
push 1
push 0
push edi
call fcn.00474ee0
add esp, 0x10
test eax, eax
jne 0x490daf
inc esi
mov dword [ebp - 0x1d14], esi
cmp dword [ebx + 0xec], 0
jne 0x490eb0
call fcn.00428a90
mov ecx, eax
test ecx, ecx
je 0x4922bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1cfc], eax
mov eax, 0x5b8b8c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1cfc]
test eax, 0xffff0000
jne 0x490dfa
movzx eax, ax
push eax
call fcn.004295b0
jmp 0x490e06
push 1
push 0x5b8b8c
call fcn.00429870
push 0
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 7
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1d20], esi
mov eax, dword [ebx + 0xd8]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x1d2c]
push eax
call fcn.0047a2b0
add esp, 0x10
mov edx, dword [ebp - 0x1cfc]
or esi, 0xffffffff
mov byte [ebp - 4], 9
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490e66
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebx + 0xd4]
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00497250
mov esi, dword [ebp - 0x1d2c]
mov ecx, dword [ebp - 0x1d28]
cmp esi, ecx
je 0x490ea5
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x490e9e
push esi
mov ecx, ebx
call fcn.00495130
mov ecx, dword [ebp - 0x1d28]
add esi, 4
cmp esi, ecx
jne 0x490e88
lea ecx, [ebp - 0x1d2c]
call fcn.00429000
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490ece
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xe
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x490eef
push dword [ebx + 0x28]
push 0x11
push 0xe
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x491342
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x1cfc]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1cfc]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x490f50
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftoffice6
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.00559ca7
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0054b380
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559d1c
push 0x5b3dc8
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.00559ca7
add esp, 0x30
lea eax, [ebp - 0x1cf8]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1d00], eax
cmp eax, 0xffffffff
je 0x491342
mov esi, eax
nop
test byte [ebp - 0x1cf8], 0x10
je 0x49121d
mov dword [ebp - 0x1cfc], 0
xor esi, esi
lea esp, [esp]
push dword [esi + 0x60251c]
lea eax, [ebp - 0x1ccc]
push eax
call fcn.00555852
add esp, 8
test eax, eax
je 0x491019
add esi, 4
cmp esi, 0x10
jb 0x490ff0
mov esi, dword [ebp - 0x1cfc]
jmp 0x49101e
mov esi, 1
push 0x23
xor eax, eax
mov dword [ebp - 0x1a80], 0
push str.Setup_EnableSavingAdditionalFolders
lea ecx, [ebp - 0x1a90]
mov dword [ebp - 0x1a7c], 7
mov word [ebp - 0x1a90], ax
call fcn.0042daa0
mov ecx, dword [ebx + 0x108]
lea eax, [ebp - 0x1a90]
push eax
lea eax, [ebp - 0x1aa8]
mov byte [ebp - 4], 0xa
push eax
call fcn.004428a0
cmp dword [eax + 0x14], 8
jb 0x491072
mov eax, dword [eax]
push 0x5b07b4
push eax
call fcn.00555852
mov edx, dword [ebp - 0x1a94]
add esp, 8
test eax, eax
sete byte [ebp - 0x1d2d]
cmp edx, 8
jb 0x4910c9
mov ecx, dword [ebp - 0x1aa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4910bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4922c6
push edx
push ecx
call fcn.00546044
add esp, 8
mov edx, dword [ebp - 0x1a7c]
xor eax, eax
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a94], 7
mov word [ebp - 0x1aa8], ax
mov byte [ebp - 4], al
cmp edx, 8
jb 0x491129
mov ecx, dword [ebp - 0x1a90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49111f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4922c6
push edx
push ecx
call fcn.00546044
add esp, 8
cmp byte [ebp - 0x1d2d], 0
je 0x49114f
push dword [0x60252c]
lea eax, [ebp - 0x1ccc]
push eax
call fcn.00555852
add esp, 8
test eax, eax
je 0x49131f
test esi, esi
jne 0x49131f
call fcn.00428a90
mov ecx, eax
test ecx, ecx
je 0x4922bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1cfc], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xb
test eax, 0xffff0000
jne 0x491196
movzx eax, ax
lea ecx, [ebp - 0x1cfc]
push eax
call fcn.004295b0
jmp 0x4911c2
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4911a0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.00429870
push 1
push 0x5ad728
lea ecx, [ebp - 0x1cfc]
mov byte [ebp - 4], 0xc
call fcn.00429240
lea ecx, [ebp - 0x1ccc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4911e1
sub ecx, edx
lea eax, [ebp - 0x1ccc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.00429240
mov esi, dword [ebp - 0x1cfc]
push 0
push 1
push 1
push esi
call fcn.00474ee0
add esp, 0x10
jmp 0x4912fa
lea eax, [ebp - 0x1ccc]
push str.CUSTOM.DIC
push eax
call fcn.00555852
add esp, 8
test eax, eax
je 0x491325
call fcn.00428a90
mov ecx, eax
test ecx, ecx
je 0x4922bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1cfc], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xd
test eax, 0xffff0000
jne 0x491278
movzx eax, ax
lea ecx, [ebp - 0x1cfc]
push eax
call fcn.004295b0
jmp 0x4912a3
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x491281
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.00429870
push 1
push 0x5ad728
lea ecx, [ebp - 0x1cfc]
mov byte [ebp - 4], 0xe
call fcn.00429240
lea ecx, [ebp - 0x1ccc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4912c2
sub ecx, edx
lea eax, [ebp - 0x1ccc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.00429240
mov esi, dword [ebp - 0x1cfc]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x491304
inc dword [ebp - 0x1d14]
mov eax, edi
mov byte [ebp - 4], 0
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49131f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d00]
lea eax, [ebp - 0x1cf8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x490fd0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x11
push 0xf
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x491363
push dword [ebx + 0x28]
push 0x11
push 0xf
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x491f74
mov dword [ebp - 0x1d10], 0
mov dword [ebp - 0x1d0c], 0
mov dword [ebp - 0x1d08], 0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xf
push eax
mov ecx, ebx
call fcn.0048bb80
push str.Kingsoftdocsecurity
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x10
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x11
cmp esi, dword [ebp - 0x1d08]
je 0x4913e4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x4913f1
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x10
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491412
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491433
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoftkyunkit
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x12
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x13
cmp esi, dword [ebp - 0x1d08]
je 0x491488
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x491495
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4914b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4914d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoft_nse
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x14
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x15
cmp esi, dword [ebp - 0x1d08]
je 0x49152c
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x491539
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x14
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49155a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49157b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoftwpspdf
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x16
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x17
cmp esi, dword [ebp - 0x1d08]
je 0x4915d0
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x4915dd
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4915fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49161f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoftpersonalofflinecache
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x18
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x19
cmp esi, dword [ebp - 0x1d08]
je 0x491674
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x491681
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x18
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4916a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4916c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoft_startmenu
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x1a
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x1b
cmp esi, dword [ebp - 0x1d08]
je 0x491718
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x491725
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x1a
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491746
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491767
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoft_taskbar
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x1c
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x1d
cmp esi, dword [ebp - 0x1d08]
je 0x4917bc
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x4917c9
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x1c
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4917ea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49180b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x1e
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x1f
cmp esi, dword [ebp - 0x1d08]
je 0x491860
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x49186d
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x1e
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49188e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4918af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d00]
mov ecx, ebx
push eax
call fcn.0048b750
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 0x20
push eax
call fcn.00429080
add esp, 0xc
mov esi, dword [ebp - 0x1d0c]
mov byte [ebp - 4], 0x21
cmp esi, dword [ebp - 0x1d08]
je 0x491904
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d0c], 4
jmp 0x491911
push eax
push esi
lea ecx, [ebp - 0x1d10]
call fcn.00428c50
mov edx, dword [ebp - 0x1cfc]
mov eax, edi
mov byte [ebp - 4], 0x20
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491932
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d00]
mov eax, edi
mov byte [ebp - 4], 0xf
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491953
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d10]
cmp esi, dword [ebp - 0x1d0c]
je 0x49197c
push 0
push 1
push 0
push dword [esi]
call fcn.00474ee0
add esi, 4
add esp, 0x10
cmp esi, dword [ebp - 0x1d0c]
jne 0x491961
push 0x18
mov dword [ebp - 0x1d38], 0
mov dword [ebp - 0x1d34], 0
call fcn.00546014
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x1d38], eax
mov dword [ebp - 0x1d2c], 0
mov dword [ebp - 0x1d28], 0
mov dword [ebp - 0x1d24], 0
mov byte [ebp - 4], 0x23
call fcn.00428a90
mov ecx, eax
test ecx, ecx
je 0x4922bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1cfc], eax
mov eax, str.XLSTART
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1cfc]
test eax, 0xffff0000
jne 0x491a05
movzx eax, ax
push eax
call fcn.004295b0
jmp 0x491a11
push 7
push str.XLSTART
call fcn.00429870
mov eax, dword [ebp - 0x1d28]
mov esi, dword [ebp - 0x1cfc]
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x1d00], eax
cmp eax, dword [ebp - 0x1d24]
je 0x491a4f
lea eax, [esi - 0x10]
push eax
call fcn.004293f0
mov ecx, dword [ebp - 0x1d00]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1d28], 4
jmp 0x491a62
lea ecx, [ebp - 0x1cfc]
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00428c50
mov byte [ebp - 4], 0x23
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x491a7d
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0xf0], 0
je 0x491b40
call fcn.00428a90
mov ecx, eax
test ecx, ecx
je 0x4922bc
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1cfc], eax
mov eax, str.addons
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1cfc]
test eax, 0xffff0000
jne 0x491ac8
movzx eax, ax
push eax
call fcn.004295b0
jmp 0x491ad4
push 6
push str.addons
call fcn.00429870
mov eax, dword [ebp - 0x1d28]
mov esi, dword [ebp - 0x1cfc]
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x1d00], eax
cmp eax, dword [ebp - 0x1d24]
je 0x491b12
lea eax, [esi - 0x10]
push eax
call fcn.004293f0
mov ecx, dword [ebp - 0x1d00]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1d28], 4
jmp 0x491b25
lea ecx, [ebp - 0x1cfc]
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00428c50
mov byte [ebp - 4], 0x23
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x491b40
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d20]
mov ecx, ebx
push eax
call fcn.0048bb80
push str.Kingsoftwps
push eax
lea eax, [ebp - 0x1d3c]
mov byte [ebp - 4], 0x28
push eax
call fcn.00429080
mov eax, dword [eax]
sub eax, 0x10
mov byte [ebp - 4], 0x29
push eax
call fcn.004293f0
add eax, 0x10
add esp, 0x10
mov dword [ebp - 0x1a88], eax
mov eax, dword [ebp - 0x1d2c]
mov ecx, dword [ebp - 0x1d28]
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov dword [ebp - 0x1cfc], eax
mov dword [ebp - 0x1d00], ecx
cmp eax, ecx
je 0x491c4f
mov esi, ecx
lea ecx, [ebp - 0x1a84]
sub esi, eax
sar esi, 2
push esi
call fcn.0042d9e0
mov edi, eax
lea eax, [ebp - 0x1a84]
mov dword [ebp - 0x1a84], edi
mov dword [ebp - 0x1a80], edi
mov dword [ebp - 0x1d40], eax
lea ecx, [edi + esi*4]
mov dword [ebp - 0x1a7c], ecx
mov dword [ebp - 0x1a9c], edi
mov dword [ebp - 0x1a98], edi
mov dword [ebp - 0x1a94], eax
mov esi, dword [ebp - 0x1cfc]
mov ebx, dword [ebp - 0x1d00]
mov byte [ebp - 4], 0x2c
lea esp, [esp]
mov eax, dword [esi]
sub eax, 0x10
push eax
call fcn.004293f0
add eax, 0x10
add esi, 4
mov dword [edi], eax
add esp, 4
add edi, 4
mov dword [ebp - 0x1a98], edi
cmp esi, ebx
jne 0x491c20
mov ebx, dword [ebp - 0x1d1c]
mov dword [ebp - 0x1a80], edi
cmp dword [ebp - 0x1d34], 0xaaaaaaa
mov eax, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x1cfc], eax
je 0x4922cb
lea eax, [ebp - 0x1d38]
mov dword [ebp - 0x1d04], eax
push 0x18
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x1d00], 0
call fcn.00546014
mov ecx, dword [ebp - 0x1a88]
mov edi, eax
add ecx, 0xfffffff0
mov dword [ebp - 0x1d00], edi
push ecx
call fcn.004293f0
mov ecx, dword [ebp - 0x1cfc]
add eax, 0x10
mov dword [edi + 8], eax
add esp, 8
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov eax, dword [ebp - 0x1a84]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x1a80]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x1a7c]
mov dword [edi + 0x14], eax
inc dword [ebp - 0x1d34]
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov eax, dword [ecx + 4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov dword [ecx + 4], edi
mov dword [eax], edi
mov edi, dword [ebp - 0x1a84]
mov byte [ebp - 4], 0x29
test edi, edi
je 0x491d96
mov eax, dword [ebp - 0x1a80]
cmp edi, eax
je 0x491d60
or esi, 0xffffffff
mov ebx, eax
mov edx, dword [edi]
mov eax, esi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491d4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 4
cmp edi, ebx
jne 0x491d34
mov edi, dword [ebp - 0x1a84]
mov ebx, dword [ebp - 0x1d1c]
mov eax, dword [ebp - 0x1a7c]
lea ecx, [ebp - 0x1a84]
sub eax, edi
sar eax, 2
push eax
push edi
call fcn.00429ab0
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov edx, dword [ebp - 0x1a88]
or edi, 0xffffffff
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491db6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d3c]
mov eax, edi
mov byte [ebp - 4], 0x28
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491dd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d20]
mov eax, edi
mov byte [ebp - 4], 0x23
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491df8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1d38]
mov esi, dword [ecx]
cmp esi, ecx
je 0x491e21
lea eax, [esi + 0xc]
push eax
push 1
push dword [esi + 8]
call fcn.00475010
mov esi, dword [esi]
add esp, 0xc
mov ecx, dword [ebp - 0x1d38]
cmp esi, ecx
jne 0x491e04
mov esi, dword [ebp - 0x1d2c]
mov byte [ebp - 4], 0x22
test esi, esi
je 0x491ea8
mov eax, dword [ebp - 0x1d28]
cmp esi, eax
je 0x491e6c
mov ebx, eax
jmp 0x491e40
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491e59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x491e40
mov esi, dword [ebp - 0x1d2c]
mov ebx, dword [ebp - 0x1d1c]
mov eax, dword [ebp - 0x1d24]
lea ecx, [ebp - 0x1d2c]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.00429ab0
mov ecx, dword [ebp - 0x1d38]
mov dword [ebp - 0x1d2c], 0
mov dword [ebp - 0x1d28], 0
mov dword [ebp - 0x1d24], 0
mov eax, dword [ecx + 4]
mov byte [ebp - 4], 0xf
mov dword [eax], 0
mov esi, dword [ecx]
test esi, esi
je 0x491f01
jmp 0x491ec0
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [ebp - 0x1d20], eax
call fcn.00429000
mov edx, dword [esi + 8]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491eea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
push esi
call fcn.00546044
mov eax, dword [ebp - 0x1d20]
add esp, 8
mov esi, eax
test eax, eax
jne 0x491ec0
push 0x18
push dword [ebp - 0x1d38]
call fcn.00546044
mov esi, dword [ebp - 0x1d10]
add esp, 8
mov byte [ebp - 4], 0
test esi, esi
je 0x491f74
mov eax, dword [ebp - 0x1d0c]
cmp esi, eax
je 0x491f5c
mov ebx, eax
jmp 0x491f30
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x491f49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x491f30
mov esi, dword [ebp - 0x1d10]
mov ebx, dword [ebp - 0x1d1c]
mov eax, dword [ebp - 0x1d08]
lea ecx, [ebp - 0x1d10]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.00429ab0
push 0x11
push 0x10
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x491f95
push dword [ebx + 0x28]
push 0x11
push 0x10
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
mov ecx, 0x5ad78c
mov eax, 0x5b01ec
cmove eax, ecx
lea ecx, [ebp - 0x1d1c]
push eax
call fcn.004435d0
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x1a9c], 4
mov byte [ebp - 4], 0x2f
mov ecx, dword [eax - 0xc]
lea edx, [ecx*2 + 2]
mov dword [ebp - 0x1a98], edx
test edx, edx
js 0x4922d5
mov ecx, dword [eax - 8]
mov esi, 1
sub esi, dword [eax - 4]
sub ecx, edx
or ecx, esi
jge 0x492001
push edx
lea ecx, [ebp - 0x1d1c]
call fcn.004296d0
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x1a94], eax
mov ecx, ebx
lea eax, [ebp - 0x1a9c]
push eax
call fcn.004926b0
mov edx, dword [ebp - 0x1d1c]
mov eax, edi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492036
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.00485030
push 0x11
push 0x11
mov ecx, 0x631c58
call fcn.004b58d0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49205e
push dword [ebx + 0x28]
push 0x11
push 0x11
call eax
add esp, 0xc
cmp dword [ebx + 0xdc], 0
je 0x4920dc
lea eax, [ebp - 0x1d1c]
mov ecx, ebx
push eax
call fcn.0048ba60
mov eax, dword [ebp - 0x1d1c]
lea ecx, [ebp - 0x1d1c]
mov dword [ebp - 0x1a9c], 3
mov byte [ebp - 4], 0x30
mov eax, dword [eax - 0xc]
lea eax, [eax*2 + 2]
push eax
mov dword [ebp - 0x1a98], eax
call fcn.0046b460
mov dword [ebp - 0x1a94], eax
mov ecx, ebx
lea eax, [ebp - 0x1a9c]
push eax
call fcn.004926b0
mov edx, dword [ebp - 0x1d1c]
mov eax, edi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4920ed
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4920ed
push ecx
push esp
mov ecx, ebx
call fcn.0048ba60
call fcn.004aa4f0
add esp, 4
mov ecx, ebx
call fcn.00495af0
call fcn.004409a0
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x49211e
push dword [ebx + 0x8c]
push 0
call esi
push eax
push dword [ebx + 0xdc]
push 0x67
call fcn.00438b10
add esp, 0xc
call fcn.00440970
test eax, eax
je 0x49213e
push dword [ebx + 0x8c]
push 0
call esi
push eax
push 0
push 0x69
call fcn.00438b10
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49226a
push 0x208
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.0054b380
add esp, 0xc
lea eax, [ebp - 0x1d20]
mov ecx, ebx
push eax
call fcn.0048bb80
push dword [eax]
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.00559d1c
mov edx, dword [ebp - 0x1d20]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49219f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoft
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.00559ca7
push 1
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.00479880
push 0x208
lea eax, [ebp - 0x1a78]
push 0
push eax
call fcn.0054b380
add esp, 0x24
lea eax, [ebp - 0x1a78]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x1a78]
push eax
lea ecx, [ebp - 0x1d3c]
call fcn.004435d0
push str.kingsoft
push eax
lea eax, [ebp - 0x1d20]
mov byte [ebp - 4], 0x31
push eax
call fcn.00429080
push 1
push 1
push dword [eax]
mov byte [ebp - 4], 0x32
call fcn.00479880
mov edx, dword [ebp - 0x1d20]
add esp, 0x18
mov byte [ebp - 4], 0x31
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x492249
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d3c]
mov eax, edi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49226a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.00494e80
mov eax, dword [ebp - 0x1d18]
xor ebx, ebx
cmp dword [ebp - 0x1d14], ebx
mov dword [ebp - 4], 0xffffffff
sete bl
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x49229e
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00545ec7
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004293d0
call fcn.00555394
push str.list_too_long
call fcn.005479d1
push 0x80070057
call fcn.004293d0
int3