Function at 0x4e5a30
Capabilities:
Check if file exists
Get common file path
Get program files directory
Query or enumerate registry value
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50d4ba
mov eax, dword fs:[0]
push eax
sub esp, 0x704
mov eax, dword [0x531304]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x29d], 0
mov dword [ebp - 0x29c], 0
mov byte [ebp - 0x134], 0
push 0x103
push 0
lea eax, [ebp - 0x133]
push eax
call fcn.00415fc0
add esp, 0xc
mov dword [ebp - 0x2a8], 0x104
push str.Juzi.exe
lea ecx, [ebp - 0x298]
call fcn.00401e20
mov dword [ebp - 4], 0
push str.hao123Juzi.exe
lea ecx, [ebp - 0x27c]
call fcn.00401e20
mov byte [ebp - 4], 1
push str.User_DataDefaultBookmark.db
lea ecx, [ebp - 0x2c]
call fcn.00401e20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.004011e0
mov byte [ebp - 4], 3
cmp dword [0x55b9f4], 0
jne 0x4e5b45
push 0x523640
call fcn.004e4170
add esp, 4
mov dword [ebp - 0x4c4], 0xfffffffc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.00401260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.00401260
mov eax, dword [ebp - 0x4c4]
jmp 0x4e6a86
mov ecx, dword [ebp + 8]
push ecx
call fcn.004f9c00
add esp, 4
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x2a4]
push edx
call fcn.00415e20
add esp, 4
test eax, eax
jne 0x4e5bbb
mov dword [ebp - 0x4c8], 0xfffffffd
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.00401260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.00401260
mov eax, dword [ebp - 0x4c8]
jmp 0x4e6a86
push 0x523664
call fcn.004f49c0
add esp, 4
test eax, eax
jne 0x4e5bdd
push 0x523670
call fcn.004f49c0
add esp, 4
test eax, eax
je 0x4e5bf7
push str.juzi.exe
call fcn.004349e0
add esp, 4
push str.hao123juzi.exe
call fcn.004349e0
add esp, 4
mov eax, dword [ebp - 0x2a4]
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_url___s_n
call fcn.004e4170
add esp, 8
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415fc0
add esp, 0xc
lea edx, [ebp - 0x2a8]
push edx
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x138]
push ecx
push 0x513f56
push str.ApplicationsJuzi.exe_shellopencommand
push 0x80000000
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e5db1
lea edx, [ebp - 0x134]
push edx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e5db1
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4e5db1
push 0
lea edx, [ebp - 0x298]
push edx
lea ecx, [ebp - 0x260]
call fcn.00413640
push eax
push 0
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x260]
call fcn.00401320
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x6f0]
push edx
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4e4]
call fcn.00401260
push 0x513f57
lea ecx, [ebp - 0x500]
call fcn.00401e20
mov byte [ebp - 4], 5
push 0x5236f4
lea ecx, [ebp - 0x51c]
call fcn.00401e20
mov byte [ebp - 4], 6
lea eax, [ebp - 0x500]
push eax
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x260]
push edx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x51c]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x500]
call fcn.00401260
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e5db1
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path1___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx ecx, byte [ebp - 0x29d]
test ecx, ecx
jne 0x4e5ef6
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x138]
push edx
push 0x523724
push str.SoftwareJuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e5ef6
lea eax, [ebp - 0x134]
push eax
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e5ef6
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0x513fa5
lea ecx, [ebp - 0x538]
call fcn.00401e20
mov byte [ebp - 4], 7
push 0x52374c
lea ecx, [ebp - 0x554]
call fcn.00401e20
mov byte [ebp - 4], 8
lea edx, [ebp - 0x538]
push edx
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x260]
push ecx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x554]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x538]
call fcn.00401260
push 0x523750
lea ecx, [ebp - 0x260]
call fcn.0040bb70
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e5ef6
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path2___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx eax, byte [ebp - 0x29d]
test eax, eax
jne 0x4e60ab
push 0x104
push 0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415fc0
add esp, 0xc
lea edx, [ebp - 0x2a8]
push edx
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x138]
push ecx
push 0x513fa6
push str.SOFTWAREClientsStartMenuInternetJuzi.exe_shellopencommand
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e60ab
lea edx, [ebp - 0x134]
push edx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e60ab
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4e60ab
push 0
lea edx, [ebp - 0x298]
push edx
lea ecx, [ebp - 0x260]
call fcn.00413640
push eax
push 0
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x260]
call fcn.00401320
mov dword [ebp - 0x6f4], eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f8], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x6f8]
push edx
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x570]
call fcn.00401260
push 0x513fa7
lea ecx, [ebp - 0x58c]
call fcn.00401e20
mov byte [ebp - 4], 0xa
push 0x5237c0
lea ecx, [ebp - 0x5a8]
call fcn.00401e20
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x58c]
push eax
lea ecx, [ebp - 0x5a8]
push ecx
lea edx, [ebp - 0x260]
push edx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5a8]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x58c]
call fcn.00401260
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e60ab
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path3___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx ecx, byte [ebp - 0x29d]
test ecx, ecx
jne 0x4e6260
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x138]
push edx
push 0x514003
push str.Applicationshao123Juzi.exe_shellopencommand
push 0x80000000
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e6260
lea eax, [ebp - 0x134]
push eax
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e6260
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0
lea edx, [ebp - 0x27c]
push edx
lea ecx, [ebp - 0x260]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4e6260
push 0
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x260]
call fcn.00413640
push eax
push 0
lea ecx, [ebp - 0x5c4]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00401320
mov dword [ebp - 0x6fc], eax
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x700]
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c4]
call fcn.00401260
push 0x51400d
lea ecx, [ebp - 0x5e0]
call fcn.00401e20
mov byte [ebp - 4], 0xd
push 0x523820
lea ecx, [ebp - 0x5fc]
call fcn.00401e20
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5e0]
push ecx
lea edx, [ebp - 0x5fc]
push edx
lea eax, [ebp - 0x260]
push eax
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x5fc]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5e0]
call fcn.00401260
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e6260
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path4___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx edx, byte [ebp - 0x29d]
test edx, edx
jne 0x4e63a5
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x2a8]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x138]
push eax
push str.lastinstpath
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e63a5
lea ecx, [ebp - 0x134]
push ecx
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e63a5
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0x51400e
lea ecx, [ebp - 0x618]
call fcn.00401e20
mov byte [ebp - 4], 0xf
push 0x52387c
lea ecx, [ebp - 0x634]
call fcn.00401e20
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp - 0x634]
push ecx
lea edx, [ebp - 0x260]
push edx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x634]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x618]
call fcn.00401260
push 0x523880
lea ecx, [ebp - 0x260]
call fcn.0040bb70
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e63a5
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path5___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx ecx, byte [ebp - 0x29d]
test ecx, ecx
jne 0x4e655a
push 0x104
push 0
lea edx, [ebp - 0x134]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x138]
push edx
push 0x51400f
push str.SOFTWAREClientsStartMenuInternethao123Juzi.exe_shellopencommand
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4e655a
lea eax, [ebp - 0x134]
push eax
call fcn.00415e20
add esp, 4
cmp eax, 5
jb 0x4e655a
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0
lea edx, [ebp - 0x27c]
push edx
lea ecx, [ebp - 0x260]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4e655a
push 0
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x260]
call fcn.00413640
push eax
push 0
lea ecx, [ebp - 0x650]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00401320
mov dword [ebp - 0x704], eax
mov edx, dword [ebp - 0x704]
mov dword [ebp - 0x708], edx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x708]
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x650]
call fcn.00401260
push 0x514015
lea ecx, [ebp - 0x66c]
call fcn.00401e20
mov byte [ebp - 4], 0x12
push 0x5238f8
lea ecx, [ebp - 0x688]
call fcn.00401e20
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x66c]
push ecx
lea edx, [ebp - 0x688]
push edx
lea eax, [ebp - 0x260]
push eax
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x688]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x66c]
call fcn.00401260
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e655a
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path6___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx edx, byte [ebp - 0x29d]
test edx, edx
jne 0x4e6640
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00415fc0
add esp, 0xc
push 0
push 0x26
lea ecx, [ebp - 0x134]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push str.JuziBrowser_
lea ecx, [ebp - 0x260]
call fcn.0040bb70
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4e660a
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x260]
call fcn.004012a0
push str.hao123JuziBrowser_
lea ecx, [ebp - 0x260]
call fcn.0040bb70
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e6640
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path7___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx eax, byte [ebp - 0x29d]
test eax, eax
jne 0x4e68e7
mov byte [ebp - 0x3b4], 0
push 0x103
push 0
lea ecx, [ebp - 0x3b3]
push ecx
call fcn.00415fc0
add esp, 0xc
mov byte [ebp - 0x4bc], 0
push 0x103
push 0
lea edx, [ebp - 0x4bb]
push edx
call fcn.00415fc0
add esp, 0xc
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x4e66f2
lea ecx, [ebp - 0x4c0]
push ecx
push 0x19
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jl 0x4e66de
lea edx, [ebp - 0x3b4]
push edx
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov ecx, dword [ebp - 0x4c0]
push ecx
mov edx, dword [ebp - 0x2ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2ac]
push ecx
mov edx, dword [eax + 0x14]
call edx
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2ac]
push edx
mov eax, dword [ecx + 8]
call eax
lea ecx, [ebp - 0x3b4]
push ecx
lea edx, [ebp - 0x4bc]
push edx
call fcn.00415eb0
add esp, 8
push 0x523978
lea eax, [ebp - 0x4bc]
push eax
call fcn.00415ec0
add esp, 8
lea ecx, [ebp - 0x4bc]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4e6757
lea edx, [ebp - 0x3b4]
push edx
lea eax, [ebp - 0x4bc]
push eax
call fcn.00415eb0
add esp, 8
push str.hao123
lea ecx, [ebp - 0x4bc]
push ecx
call fcn.00415ec0
add esp, 8
lea edx, [ebp - 0x4bc]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e68e7
push 0x104
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x4bc]
push edx
call fcn.004f5130
add esp, 4
push eax
call fcn.004de630
add esp, 8
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x260]
call fcn.004012a0
push 0
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00413640
cmp dword [0x528cdc], eax
je 0x4e68e7
push 0
lea edx, [ebp - 0x298]
push edx
lea ecx, [ebp - 0x260]
call fcn.00413640
push eax
push 0
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp - 0x260]
call fcn.00401320
mov dword [ebp - 0x70c], eax
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x710], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x710]
push edx
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6a4]
call fcn.00401260
push 0x514016
lea ecx, [ebp - 0x6c0]
call fcn.00401e20
mov byte [ebp - 4], 0x15
push 0x5239a0
lea ecx, [ebp - 0x6dc]
call fcn.00401e20
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x6c0]
push eax
lea ecx, [ebp - 0x6dc]
push ecx
lea edx, [ebp - 0x260]
push edx
call fcn.004f8d60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
call fcn.00401280
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6dc]
call fcn.00401260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c0]
call fcn.00401260
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x260]
call fcn.004013e0
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x4e68e7
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push str._DEBUGINFO__LOCK__SET_LockJuzi_path8___s_n
call fcn.004e4170
add esp, 8
mov byte [ebp - 0x29d], 1
movzx ecx, byte [ebp - 0x29d]
test ecx, ecx
jne 0x4e6943
mov dword [ebp - 0x6e0], 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.00401260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.00401260
mov eax, dword [ebp - 0x6e0]
jmp 0x4e6a86
mov byte [ebp - 0x244], 0
push 0x103
push 0
lea edx, [ebp - 0x243]
push edx
call fcn.00415fc0
add esp, 0xc
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
push 0x104
lea eax, [ebp - 0x244]
push eax
call fcn.004188fa
add esp, 0xc
lea ecx, [ebp - 0x244]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea edx, [ebp - 0x244]
push edx
call fcn.004f4b10
add esp, 4
test eax, eax
je 0x4e69f1
mov dword [ebp - 0x6e4], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.00401260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.00401260
mov eax, dword [ebp - 0x6e4]
jmp 0x4e6a86
push 0x80
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x260]
call fcn.004012e0
push eax
call fcn.004e5930
add esp, 8
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x29c]
mov dword [ebp - 0x6e8], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x260]
call fcn.00401260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.00401260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
call fcn.00401260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.00401260
mov eax, dword [ebp - 0x6e8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004158f4
mov esp, ebp
pop ebp
ret 4