Function at 0x409340
Capabilities:
Check if file exists
Delete directory
Get common file path
Get file attributes
Move file
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x472403
mov eax, dword fs:[0]
push eax
sub esp, 0x468
mov eax, dword [0x498068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x3b4], ebx
call fcn.00401900
lea edx, [ebp - 0x350]
mov dword [ebp - 4], ebx
lea ecx, [ebx + 0x6c]
call fcn.0042b6d0
push 0x11
xor eax, eax
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
lea ecx, [ebp - 0x278]
push 0x485e78
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
call fcn.00401a50
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x350]
call fcn.00426760
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x40942a
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409420
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40afea
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 3
call fcn.00401810
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call esi
cmp eax, 0xffffffff
je 0x409478
shr eax, 4
and al, 1
je 0x409478
mov dl, 1
lea ecx, [ebp - 0x3b0]
call fcn.004274b0
push 0x17
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0
lea ecx, [ebp - 0x278]
push str.TencentQQPluginCommon
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
call fcn.00401a50
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x398]
push eax
lea ecx, [ebp - 0x350]
call fcn.00426760
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x40951c
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409512
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40afef
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0xa
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x409564
shr eax, 4
and al, 1
je 0x409564
mov dl, 1
lea ecx, [ebp - 0x398]
call fcn.004274b0
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0xb
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push str.InstallPath
mov byte [ecx], al
call fcn.00405f80
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x10
call fcn.00441670
add esp, 0x18
lea eax, [ebp - 0x2f0]
lea ecx, [ebp - 0x338]
push eax
call fcn.00401920
mov byte [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0x13
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push 0x484d54
mov byte [ecx], al
call fcn.00405f80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x14
call fcn.00441670
add esp, 0x18
lea eax, [ebp - 0x2d8]
lea ecx, [ebp - 0x2c0]
push eax
call fcn.00401920
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x338]
call fcn.00426a40
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x17
call fcn.00401920
lea ecx, [ebp - 0x230]
call fcn.00426940
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x338]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00401a50
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x17
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x16
call fcn.00401850
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426a40
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x19
call fcn.00401920
lea ecx, [ebp - 0x230]
call fcn.00426940
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00401a50
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x19
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x16
call fcn.00401850
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0xd
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x484d34
mov byte [ecx], 0
call fcn.00405f80
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x1c
call fcn.004412c0
add esp, 0x18
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
push 0x12
push str.TencentQQQQCloud
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x350]
call fcn.00426760
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x409873
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409869
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aff4
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x20
call fcn.00401900
lea edx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x338]
call fcn.00425e60
test al, al
jne 0x4099f7
lea ecx, [ebp - 0x2a8]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x4098dc
mov dl, 1
lea ecx, [ebp - 0x2a8]
call fcn.004274b0
push 0xf
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.BinQQCloud.dll
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x27
cmp ecx, eax
je 0x409963
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x409954
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00401a50
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x26
call fcn.00401850
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x4099b6
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4099ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40aff9
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x25
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x4099f7
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.004274b0
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x20
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x1c
call fcn.00401850
push 5
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.pubno
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x338]
call fcn.00426760
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x409ab9
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409aaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40affe
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x2e
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x409afa
xor dl, dl
lea ecx, [ebp - 0x380]
call fcn.004274b0
push 0xf
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.Binmsimg32.dll
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x338]
call fcn.00426760
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x409b9e
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409b94
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b003
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x35
call fcn.00401810
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
je 0x409e95
cmp dword [0x49ad2c], 0
jg 0x409c4a
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x6f
call edi
push 0x6f
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x46c]
mov ebx, 1
mov edx, str.msimg32.dll_Exists
mov dword [ebp - 0x3b4], ebx
call fcn.00407130
mov dword [ebp - 4], 0x35
test bl, 1
je 0x409c6a
and ebx, 0xfffffffe
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x308]
call fcn.004274b0
test al, al
jne 0x409e95
cmp dword [0x49ad2c], 0
jg 0x409ceb
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x72
call edi
push 0x72
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
or ebx, 2
mov byte [ebp - 4], 0x3b
mov edx, str.delete_msimg32.dll_failed
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407130
mov dword [ebp - 4], 0x35
test bl, 2
je 0x409d0b
and ebx, 0xfffffffd
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
lea ecx, [ebp - 0x260]
call fcn.0042ab60
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x308]
call fcn.004265e0
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x409d7f
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409d75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b008
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x308]
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x409e86
cmp dword [0x49ad2c], eax
jg 0x409e34
push eax
push 0x75
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
mov byte [ebp - 4], 0x43
lea ecx, [eax + 8]
or ebx, 4
mov edx, str.move_msimg32.dll_to
mov dword [ebp - 0x3b4], ebx
call fcn.00407130
cmp dword [ebp - 0x21c], 8
lea edx, [ebp - 0x230]
mov ecx, eax
cmovae edx, dword [ebp - 0x230]
call fcn.00425a00
mov edx, str._failed
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x3e
test bl, 4
je 0x409e54
and ebx, 0xfffffffb
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x230]
push 4
cmovae ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x35
call fcn.00401850
push 0x1a
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.PluginCom.Tencent.NetDisk
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov dl, 1
mov byte [ebp - 4], 0x45
mov ecx, eax
call fcn.004274b0
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x44
call fcn.00401850
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x409f55
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409f4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b00d
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x35
call fcn.00401900
lea edx, [ebp - 0x368]
mov byte [ebp - 4], 0x4a
mov ecx, 0x6f
call fcn.0042b6d0
test al, al
je 0x40a39d
push 0x2f
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.GoogleChromeApplicationplugins_npactivex.dll
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x368]
call fcn.00426760
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40a041
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a037
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b012
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x248]
push 0x2e
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.GoogleChromeApplicationplugins_npchrome.dll
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x368]
call fcn.00426760
mov byte [ebp - 4], 0x55
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a0f8
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a0ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b017
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x54
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a24c
cmp dword [0x49ad2c], 0
jg 0x40a19f
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x8b
call edi
push 0x8b
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
or ebx, 8
mov byte [ebp - 4], 0x59
mov edx, str.npactivex.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407130
mov dword [ebp - 4], 0x54
test bl, 8
je 0x40a1bf
and ebx, 0xfffffff7
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x2a8]
call fcn.004274b0
test al, al
jne 0x40a24c
cmp dword [0x49ad2c], 0
jg 0x40a20a
push 0
push 0x8d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
or ebx, 0x10
mov byte [ebp - 4], 0x5a
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npactivex.dll_file_failed__delete_after_reboot
call fcn.00407130
mov dword [ebp - 4], 0x54
test bl, 0x10
je 0x40a22a
and ebx, 0xffffffef
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
lea ecx, [ebp - 0x2a8]
call fcn.00405f50
cmp eax, 0x104
jae 0x40a24c
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x260]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a37f
cmp dword [0x49ad2c], 0
jg 0x40a2d2
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x93
call edi
push 0x93
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
or ebx, 0x20
mov byte [ebp - 4], 0x5b
mov edx, str.npchrome.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407130
mov dword [ebp - 4], 0x54
test bl, 0x20
je 0x40a2f2
and ebx, 0xffffffdf
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.004274b0
test al, al
jne 0x40a37f
cmp dword [0x49ad2c], 0
jg 0x40a33d
push 0
push 0x95
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
or ebx, 0x40
mov byte [ebp - 4], 0x5c
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npchrome.dll_file_failed__delete_after_reboot
call fcn.00407130
mov dword [ebp - 4], 0x54
test bl, 0x40
je 0x40a35d
and ebx, 0xffffffbf
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
lea ecx, [ebp - 0x260]
call fcn.00405f50
cmp eax, 0x104
jae 0x40a37f
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x4d
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x4a
call fcn.00401850
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452050
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 0x2b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x40a908
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a400
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x290]
call fcn.00401920
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40a47c
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a472
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b01c
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x248]
push 0x1d
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.TencentNpchrome_npchrome.dll
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x290]
call fcn.00426760
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a533
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a529
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b021
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x230]
push 0x1d
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.Tencent_npqscall_npqscall.dll
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x290]
call fcn.00426760
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40a5ea
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b026
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x6d
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a750
cmp dword [0x49ad2c], 0
jg 0x40a694
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0xa3
call edi
push 0xa3
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
or ebx, 0x80
mov byte [ebp - 4], 0x72
mov edx, str.npchrome.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407130
mov dword [ebp - 4], 0x6d
test bl, bl
jns 0x40a6b6
and ebx, 0xffffff7f
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.004274b0
test al, al
jne 0x40a750
cmp dword [0x49ad2c], 0
jg 0x40a708
push 0
push 0xa5
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
or ebx, 0x100
mov byte [ebp - 4], 0x73
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npchrome.dll_file_failed__delete_after_reboot
call fcn.00407130
mov dword [ebp - 4], 0x6d
test ebx, 0x100
je 0x40a72e
and ebx, 0xfffffeff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
lea ecx, [ebp - 0x260]
call fcn.00405f50
cmp eax, 0x104
jae 0x40a750
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x2a8]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a8db
cmp dword [0x49ad2c], 0
jg 0x40a7d9
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.00422bb0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0xab
call edi
push 0xab
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00425610
or ebx, 0x200
mov byte [ebp - 4], 0x74
mov edx, str.npqscall.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407130
mov dword [ebp - 4], 0x6d
test ebx, 0x200
je 0x40a7ff
and ebx, 0xfffffdff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x2a8]
call fcn.004274b0
test al, al
jne 0x40a8ad
cmp dword [0x49ad2c], 0
jg 0x40a851
push 0
push 0xad
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
or ebx, 0x400
mov byte [ebp - 4], 0x75
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npqscall.dll_file_failed__delete_after_reboot
call fcn.00407130
mov dword [ebp - 4], 0x6d
test ebx, 0x400
je 0x40a877
and ebx, 0xfffffbff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425110
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.004262b0
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.00405f50
cmp eax, 0x104
jae 0x40a8cc
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x40a8cc
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.004262b0
xor dl, dl
mov byte [ebp - 4], 0x77
mov ecx, eax
call fcn.004274b0
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x6d
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x66
call fcn.00401850
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x5f
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x4a
call fcn.00401850
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3bc], 0
push 0x2001f
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x78
push eax
push str.SoftwareTencentQQ2009
push ecx
lea ecx, [ebp - 0x3c0]
call fcn.00424000
test eax, eax
jne 0x40a9c9
push eax
push eax
push eax
push eax
push str.oversion
push dword [ebp - 0x3c0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x40a9c9
push str.oversion
lea ecx, [ebp - 0x3c0]
call fcn.00424230
test eax, eax
je 0x40a9c9
cmp dword [0x49ad2c], 0
jg 0x40a9af
push 0
push 0xbd
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00424f80
or ebx, 0x800
mov byte [ebp - 4], 0x79
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_value_oversion_failed
call fcn.00407130
mov dword [ebp - 4], 0x78
test ebx, 0x800
je 0x40a9c9
lea ecx, [ebp - 0x474]
call fcn.00425110
push 9
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.BinTXSSO
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov dl, 1
mov byte [ebp - 4], 0x7b
mov ecx, eax
call fcn.004274b0
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x7a
call fcn.00401850
mov byte [ebp - 4], 0x7c
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40aa89
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b02b
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push 0x4862bc
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov byte [ebp - 4], 0x81
cmp dword [eax + 0x14], 8
jb 0x40ab08
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push eax
call esi
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x80
call fcn.00401850
mov byte [ebp - 4], 0x82
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40ab64
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab5a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b030
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x230]
push 0x15
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.PluginCom.Tencent.QT
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x86
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov dl, 1
mov byte [ebp - 4], 0x87
mov ecx, eax
call fcn.004274b0
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x86
call fcn.00401850
mov byte [ebp - 4], 0x88
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40ac37
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ac2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b035
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x248]
push 0x1d
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.PluginCom.Tencent.AudioVideo
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov dl, 1
mov byte [ebp - 4], 0x8d
mov ecx, eax
call fcn.004274b0
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x8c
call fcn.00401850
mov byte [ebp - 4], 0x8e
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40ad0a
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ad00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b03a
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x230]
push 6
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.Plugin
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x92
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00426760
mov byte [ebp - 4], 0x93
cmp dword [eax + 0x14], 8
jb 0x40ad89
mov eax, dword [eax]
push eax
call esi
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x92
call fcn.00401850
mov byte [ebp - 4], 0x94
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40addf
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40add5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b03f
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x40ae1b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3c0]
test eax, eax
je 0x40ae36
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x3c0], 0
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x35
call fcn.00401850
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x2e
call fcn.00401850
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x1c
call fcn.00401850
mov byte [ebp - 4], 0x98
mov edx, dword [ebp - 0x30c]
cmp edx, 0x10
jb 0x40aea1
mov ecx, dword [ebp - 0x320]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b044
push edx
push ecx
call fcn.0044f7c7
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x14
call fcn.00401850
mov byte [ebp - 4], 0x9c
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x40af0f
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b049
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x10
call fcn.00401850
mov byte [ebp - 4], 0xa0
mov edx, dword [ebp - 0x2dc]
cmp edx, 8
jb 0x40af7f
mov ecx, dword [ebp - 0x2f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b04e
push edx
push ecx
call fcn.0044f7c7
add esp, 8
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 3
call fcn.00401850
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0
call fcn.00401850
lea ecx, [ebp - 0x350]
mov dword [ebp - 4], 0xffffffff
call fcn.00401850
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044f786
mov esp, ebp
pop ebp
ret 4
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
call fcn.00454bbf
int3