Function at 0x4992c0
Capabilities:
Delete file
Enumerate files on windows
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a1ba7
mov eax, dword fs:[0]
push eax
mov eax, 0x1d54
call fcn.00558750
mov eax, dword [0x63434c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1d58], ebx
push 0x11
push 1
mov ecx, 0x63cfb0
xor edi, edi
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49931d
push dword [ebx + 0x28]
push 0x11
push 1
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x499346
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b20
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048ebb0
push 0x11
push 2
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499367
push dword [ebx + 0x28]
push 0x11
push 2
call eax
add esp, 0xc
mov eax, dword [ebx + 0x18]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x499390
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b20
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048b7a0
push 0x11
push 3
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4993b1
push dword [ebx + 0x28]
push 0x11
push 3
call eax
add esp, 0xc
mov eax, dword [ebx + 0x1c]
add eax, 0xfffffff0
cmp dword [eax + 4], edi
je 0x4993da
push ecx
mov esi, esp
push eax
mov dword [ebp - 0x1d44], esi
call fcn.00429b20
add esp, 4
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0048db30
push 0x11
push 4
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4993fb
push dword [ebx + 0x28]
push 0x11
push 4
call eax
add esp, 0xc
mov ecx, ebx
call fcn.0048d250
mov ecx, ebx
call fcn.0048dd80
push 0x11
push 5
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49942a
push dword [ebx + 0x28]
push 0x11
push 5
call eax
add esp, 0xc
mov ecx, ebx
call fcn.0048cf70
mov ecx, ebx
call fcn.0048eea0
push 0x11
push 6
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499459
push dword [ebx + 0x28]
push 0x11
push 6
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xa38]
push 0
push eax
call fcn.0055c530
push dword [ebx + 0x10]
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.0056b39c
push str.office6cfgsoeminfo
lea eax, [ebp - 0xa38]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0xa38]
push 1
push eax
call fcn.0047a510
add esp, 0x34
mov ecx, 1
test eax, eax
cmove edi, ecx
mov ecx, 0x63cfb0
push 0x11
push 7
mov dword [ebp - 0x1d40], edi
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x4994dc
push dword [ebx + 0x28]
push 0x11
push 7
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0xc40]
push 0
push eax
call fcn.0055c530
push dword [ebx + 0x10]
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.0056b39c
push 0x5c1204
lea eax, [ebp - 0xc40]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0xc40]
push 1
push eax
call fcn.0047a510
add esp, 0x34
test eax, eax
jne 0x499539
inc edi
mov dword [ebp - 0x1d40], edi
push 0x11
push 8
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49955a
push dword [ebx + 0x28]
push 0x11
push 8
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.0055c530
push dword [ebx + 0x10]
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.0056b39c
push str.utility_backup
lea eax, [ebp - 0x830]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0x830]
push 1
push eax
call fcn.0047a510
push 1
push 0
push dword [ebx + 0x10]
mov esi, eax
call fcn.0047f220
add esp, 0x40
lea eax, [ebp - 0x830]
push eax
push str.1748_tKUninstall::RunUninstall_tremove_folder__ws
push str.H:pub_9qls_rc_bug_mas_v12_2407Coding_support_newsetup_srccommonappKUninstallKUninstall.cpp
push str._INFO_
push 0x63cbb0
call fcn.0046bb20
add esp, 0x14
test esi, esi
jne 0x4995e8
inc edi
mov dword [ebp - 0x1d40], edi
push 0x11
push 9
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499609
push dword [ebx + 0x28]
push 0x11
push 9
call eax
add esp, 0xc
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x628]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push str.ShellNew
lea eax, [ebp - 0x628]
push 0x104
push eax
call fcn.0056b327
push 0x208
lea eax, [ebp - 0xe48]
push 0
push eax
call fcn.0055c530
push 0x208
lea eax, [ebp - 0x1050]
push 0
push eax
call fcn.0055c530
push 0x208
lea eax, [ebp - 0x1258]
push 0
push eax
call fcn.0055c530
push 0x208
lea eax, [ebp - 0x1460]
push 0
push eax
call fcn.0055c530
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0055c530
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.0056b39c
push str._newfile.wps
lea eax, [ebp - 0xe48]
push 0x104
push eax
call fcn.0056b327
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.0056b39c
push str._newfile.et
lea eax, [ebp - 0x1050]
push 0x104
push eax
call fcn.0056b327
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.0056b39c
push str._newfile.dps
lea eax, [ebp - 0x1258]
push 0x104
push eax
call fcn.0056b327
add esp, 0x48
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.0056b39c
push str._newfile.xlsx
lea eax, [ebp - 0x1460]
push 0x104
push eax
call fcn.0056b327
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b39c
push str._newfile.pptx
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b327
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xe48]
add esp, 0x30
push eax
call esi
test eax, eax
jne 0x4997af
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1050]
push eax
call esi
test eax, eax
jne 0x4997c3
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1258]
push eax
call esi
test eax, eax
jne 0x4997d7
inc edi
mov dword [ebp - 0x1d40], edi
lea eax, [ebp - 0x1460]
push eax
call esi
lea eax, [ebp - 0x218]
push eax
call esi
push 1
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.0047f220
push 0x208
lea eax, [ebp - 0x1668]
push 0
push eax
call fcn.0055c530
add esp, 0x18
lea eax, [ebp - 0x1d44]
mov ecx, ebx
push eax
call fcn.004949d0
push dword [eax]
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.0056b39c
mov edx, dword [ebp - 0x1d44]
or edi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499853
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftintranetdomain
lea eax, [ebp - 0x1668]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0x1668]
push 1
push eax
call fcn.0047a510
add esp, 0x1c
mov ecx, 0x63cfb0
push 0x11
push 0xa
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49989f
push dword [ebx + 0x28]
push 0x11
push 0xa
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x499a67
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x1d44]
mov ecx, ebx
push eax
call fcn.004949d0
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b39c
mov edx, dword [ebp - 0x1d44]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499900
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftKRM
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.0047a510
add esp, 0x1c
test eax, eax
jne 0x499935
inc dword [ebp - 0x1d40]
cmp dword [ebx + 0x20], 0
jne 0x499a67
push 1
push 0
lea eax, [ebp - 0x1ac0]
push 2
push eax
call fcn.0049fc00
add esp, 0x10
lea ecx, [ebp - 0x1ad8]
mov dword [ebp - 4], 0
push ecx
mov ecx, eax
call fcn.005216f0
push 0x1e
push str.promeappscacheLocal_Storage
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0043ee20
mov edx, eax
mov dword [ebp - 0x1aa8], 0
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a94], 0
mov ecx, dword [edx]
mov dword [ebp - 0x1aa8], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 0x1aa4], ecx
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1aa0], ecx
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1a9c], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1a98], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x1a94], eax
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
lea ecx, [ebp - 0x1ad8]
call fcn.0042aad0
lea ecx, [ebp - 0x1ac0]
mov byte [ebp - 4], 4
call fcn.0042aad0
cmp dword [ebp - 0x1a94], 8
lea eax, [ebp - 0x1aa8]
push 0
cmovae eax, dword [ebp - 0x1aa8]
push 1
push 1
push eax
call fcn.0047a510
mov edx, dword [ebp - 0x1a94]
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x499a67
mov ecx, dword [ebp - 0x1aa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x499a5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49b236
push edx
push ecx
call fcn.00558004
add esp, 8
push 0x11
push 0xb
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499a88
push dword [ebx + 0x28]
push 0x11
push 0xb
call eax
add esp, 0xc
push 1
push 0
lea eax, [ebp - 0x1ad8]
push 2
push eax
call fcn.0049fc00
add esp, 0x10
lea ecx, [ebp - 0x1ac0]
mov dword [ebp - 4], 5
push ecx
mov ecx, eax
call fcn.005216f0
mov esi, eax
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 6
jb 0x499ac0
mov esi, dword [esi]
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b23b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d44], eax
mov byte [ebp - 4], 7
test esi, esi
je 0x499b14
test esi, 0xffff0000
jne 0x499afe
movzx eax, si
lea ecx, [ebp - 0x1d44]
push eax
call fcn.00429d30
jmp 0x499b23
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x499b03
sub ecx, edx
sar ecx, 1
jmp 0x499b16
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x1d44]
call fcn.0042a000
mov edx, dword [ebp - 0x1aac]
mov byte [ebp - 4], 9
cmp edx, 8
jb 0x499b67
mov ecx, dword [ebp - 0x1ac0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x499b5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49b245
push edx
push ecx
call fcn.00558004
add esp, 8
xor eax, eax
mov dword [ebp - 0x1ab0], 0
mov dword [ebp - 0x1aac], 7
mov word [ebp - 0x1ac0], ax
mov edx, dword [ebp - 0x1ac4]
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x499bc8
mov ecx, dword [ebp - 0x1ad8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x499bbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49b245
push edx
push ecx
call fcn.00558004
add esp, 8
xor eax, eax
mov dword [ebp - 0x1ac8], 0
mov word [ebp - 0x1ad8], ax
lea eax, [ebp - 0x1d44]
push str.promebrowserHistory
push eax
lea eax, [ebp - 0x1d2c]
mov dword [ebp - 0x1ac4], 7
push eax
call fcn.004297b0
push 1
push eax
mov byte [ebp - 4], 0xb
call fcn.00446100
mov edx, dword [ebp - 0x1d2c]
add esp, 0x14
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499c2d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x499d31
push str.promebrowserPreferences
lea eax, [ebp - 0x1d44]
push eax
lea eax, [ebp - 0x1d2c]
push eax
call fcn.004297b0
push 1
push eax
mov byte [ebp - 4], 0xc
call fcn.00446100
mov edx, dword [ebp - 0x1d2c]
add esp, 0x14
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499c7f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0x20], 0
jne 0x499d31
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.004949d0
push 0x16
push str.kingsoftofflinecache
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0xd
call fcn.00429970
mov edi, dword [ebp - 0x1d2c]
push 0
push 1
push 1
push edi
call fcn.0047a510
add esp, 0x10
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push 0x15
push str.kingsoftdocsecurity
lea ecx, [ebp - 0x1d30]
mov byte [ebp - 4], 0xe
call fcn.00429970
mov esi, dword [ebp - 0x1d30]
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x499d13
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xa
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499d31
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xc
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499d52
push dword [ebx + 0x28]
push 0x11
push 0xc
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x499df1
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.004949d0
push dword [eax]
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b39c
mov edx, dword [ebp - 0x1d2c]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499db3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftwpslive
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b327
push 0
push 1
lea eax, [ebp - 0x218]
push 1
push eax
call fcn.0047a510
mov esi, dword [ebp - 0x1d40]
add esp, 0x1c
test eax, eax
jne 0x499df7
inc esi
mov dword [ebp - 0x1d40], esi
jmp 0x499df7
mov esi, dword [ebp - 0x1d40]
push 0x11
push 0xd
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499e18
push dword [ebx + 0x28]
push 0x11
push 0xd
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x499f96
cmp dword [ebx + 0xe8], 0
jne 0x499f96
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push 0x18
push str.kingsoftoffice6_backup
lea ecx, [ebp - 0x1d30]
mov byte [ebp - 4], 0xf
call fcn.00429970
mov edi, dword [ebp - 0x1d30]
push 0
push 1
push 0
push edi
call fcn.0047a510
add esp, 0x10
test eax, eax
jne 0x499e73
inc esi
mov dword [ebp - 0x1d40], esi
cmp dword [ebx + 0xec], 0
jne 0x499f78
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b24a
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, 0x5bd8c0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x499ebe
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x499eca
push 1
push 0x5bd8c0
call fcn.0042a000
push 0
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x11
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x1d48], esi
mov eax, dword [ebx + 0xd8]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x1a84]
push eax
call fcn.0047fe20
add esp, 0x10
mov edx, dword [ebp - 0x1d2c]
or eax, 0xffffffff
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499f28
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebx + 0xd4]
push eax
lea ecx, [ebp - 0x1a84]
call fcn.004a0b00
mov esi, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0x1a80]
cmp esi, ecx
je 0x499f6d
lea ebx, [ebx]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x499f66
push esi
mov ecx, ebx
call fcn.0049e1c0
mov ecx, dword [ebp - 0x1a80]
add esi, 4
cmp esi, ecx
jne 0x499f50
lea ecx, [ebp - 0x1a84]
call fcn.004296c0
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xa
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x499f96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x11
push 0xe
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x499fb7
push dword [ebx + 0x28]
push 0x11
push 0xe
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49a432
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.004949d0
push dword [eax]
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.0056b39c
mov edx, dword [ebp - 0x1d2c]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a018
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoftoffice6
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.0056b327
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0055c530
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b39c
push 0x5b86f8
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.0056b327
add esp, 0x30
lea eax, [ebp - 0x1d28]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1d30], eax
cmp eax, 0xffffffff
je 0x49a432
mov esi, eax
jmp 0x49a0a0
test byte [ebp - 0x1d28], 0x10
je 0x49a30d
mov dword [ebp - 0x1d2c], 0
xor esi, esi
lea esp, [esp]
push dword [esi + 0x60e500]
lea eax, [ebp - 0x1cfc]
push eax
call fcn.00566ed2
add esp, 8
test eax, eax
je 0x49a0e3
add esi, 4
cmp esi, 0x10
jb 0x49a0c0
jmp 0x49a0ed
mov dword [ebp - 0x1d2c], 1
mov esi, dword [ebx + 0x108]
lea ecx, [ebp - 0x1aa8]
push 0x23
xor eax, eax
mov dword [ebp - 0x1aa8], 0
push str.Setup_EnableSavingAdditionalFolders
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a94], 7
mov word [ebp - 0x1aa8], ax
call fcn.0042e2d0
lea eax, [ebp - 0x1aa8]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x1a90]
mov ecx, esi
push eax
call fcn.00443420
cmp dword [eax + 0x14], 8
jb 0x49a14d
mov eax, dword [eax]
push 0x5b6494
push eax
call fcn.00566ed2
mov edx, dword [ebp - 0x1a7c]
add esp, 8
test eax, eax
sete byte [ebp - 0x1d49]
cmp edx, 8
jb 0x49a1a4
mov ecx, dword [ebp - 0x1a90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49a19a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49b236
push edx
push ecx
call fcn.00558004
add esp, 8
mov edx, dword [ebp - 0x1a94]
xor eax, eax
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 7
mov word [ebp - 0x1a90], ax
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x49a205
mov ecx, dword [ebp - 0x1aa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x49a1fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49b236
push edx
push ecx
call fcn.00558004
add esp, 8
cmp byte [ebp - 0x1d49], 0
je 0x49a235
xor esi, esi
push dword [esi + 0x60e510]
lea eax, [ebp - 0x1cfc]
push eax
call fcn.00566ed2
add esp, 8
test eax, eax
je 0x49a40f
add esi, 4
cmp esi, 4
jb 0x49a210
cmp dword [ebp - 0x1d2c], 0
jne 0x49a40f
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b23b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x15
test eax, 0xffff0000
jne 0x49a281
movzx eax, ax
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.00429d30
jmp 0x49a2b2
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49a290
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.0042a000
push 1
push 0x5b4804
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x16
call fcn.00429970
lea ecx, [ebp - 0x1cfc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49a2d1
sub ecx, edx
lea eax, [ebp - 0x1cfc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00429970
mov esi, dword [ebp - 0x1d2c]
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
jmp 0x49a3ea
lea eax, [ebp - 0x1cfc]
push str.CUSTOM.DIC
push eax
call fcn.00566ed2
add esp, 8
test eax, eax
je 0x49a415
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b23b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x17
test eax, 0xffff0000
jne 0x49a368
movzx eax, ax
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.00429d30
jmp 0x49a393
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49a371
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.0042a000
push 1
push 0x5b4804
lea ecx, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x18
call fcn.00429970
lea ecx, [ebp - 0x1cfc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x49a3b2
sub ecx, edx
lea eax, [ebp - 0x1cfc]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00429970
mov esi, dword [ebp - 0x1d2c]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x49a3f4
inc dword [ebp - 0x1d40]
mov eax, edi
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49a40f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d30]
lea eax, [ebp - 0x1d28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x49a0a0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x11
push 0xf
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49a453
push dword [ebx + 0x28]
push 0x11
push 0xf
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
jne 0x49af04
mov dword [ebp - 0x1d3c], 0
mov dword [ebp - 0x1d38], 0
mov dword [ebp - 0x1d34], 0
lea eax, [ebp - 0x1d30]
mov byte [ebp - 4], 0x19
push eax
mov ecx, ebx
call fcn.004949d0
push str.Kingsoftdocsecurity
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1b
cmp esi, dword [ebp - 0x1d34]
je 0x49a4d4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a4e1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a4fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a51f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoftkyunkit
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1c
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1d
cmp esi, dword [ebp - 0x1d34]
je 0x49a574
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a581
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a59e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a5bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoft_nse
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x1e
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x1f
cmp esi, dword [ebp - 0x1d34]
je 0x49a614
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a621
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a63e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a65f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoftwpspdf
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x20
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x21
cmp esi, dword [ebp - 0x1d34]
je 0x49a6b4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a6c1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a6de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a6ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoftpersonalofflinecache
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x22
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x23
cmp esi, dword [ebp - 0x1d34]
je 0x49a754
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a761
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a77e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a79f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoft_startmenu
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x24
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x25
cmp esi, dword [ebp - 0x1d34]
je 0x49a7f4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a801
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a81e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a83f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoft_taskbar
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x26
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x27
cmp esi, dword [ebp - 0x1d34]
je 0x49a894
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a8a1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a8be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a8df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.004949d0
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x28
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x29
cmp esi, dword [ebp - 0x1d34]
je 0x49a934
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a941
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a95e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a97f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d30]
mov ecx, ebx
push eax
call fcn.00494420
push str.KingsoftWPS_Cloud_Files
push eax
lea eax, [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2a
push eax
call fcn.004297b0
add esp, 0xc
mov esi, dword [ebp - 0x1d38]
mov byte [ebp - 4], 0x2b
cmp esi, dword [ebp - 0x1d34]
je 0x49a9d4
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi], eax
add dword [ebp - 0x1d38], 4
jmp 0x49a9e1
push eax
push esi
lea ecx, [ebp - 0x1d3c]
call fcn.00429340
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49a9fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
mov byte [ebp - 4], 0x19
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49aa1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x1d3c]
cmp esi, dword [ebp - 0x1d38]
je 0x49aa4b
lea ecx, [ecx]
push 0
push 1
push 0
push dword [esi]
call fcn.0047a510
add esi, 4
add esp, 0x10
cmp esi, dword [ebp - 0x1d38]
jne 0x49aa30
push 0x18
mov dword [ebp - 0x1d54], 0
mov dword [ebp - 0x1d50], 0
call fcn.00557fd4
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov byte [ebp - 4], 0x2d
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b23b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, str.XLSTART
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x49aad4
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x49aae0
push 7
push str.XLSTART
call fcn.0042a000
mov eax, dword [ebp - 0x1a80]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x1d30], eax
cmp eax, dword [ebp - 0x1a7c]
je 0x49ab1e
mov esi, dword [ebp - 0x1d2c]
lea eax, [esi - 0x10]
push eax
call fcn.00429b20
mov ecx, dword [ebp - 0x1d30]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1a80], 4
jmp 0x49ab37
lea ecx, [ebp - 0x1d2c]
push ecx
push eax
lea ecx, [ebp - 0x1a84]
call fcn.00429340
mov esi, dword [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2d
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49ab52
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx + 0xf0], 0
je 0x49ac1b
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x49b23b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1d2c], eax
mov eax, str.addons
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1d2c]
test eax, 0xffff0000
jne 0x49ab9d
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x49aba9
push 6
push str.addons
call fcn.0042a000
mov eax, dword [ebp - 0x1a80]
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x1d30], eax
cmp eax, dword [ebp - 0x1a7c]
je 0x49abe7
mov esi, dword [ebp - 0x1d2c]
lea eax, [esi - 0x10]
push eax
call fcn.00429b20
mov ecx, dword [ebp - 0x1d30]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
add dword [ebp - 0x1a80], 4
jmp 0x49ac00
lea ecx, [ebp - 0x1d2c]
push ecx
push eax
lea ecx, [ebp - 0x1a84]
call fcn.00429340
mov esi, dword [ebp - 0x1d2c]
mov byte [ebp - 4], 0x2d
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49ac1b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x1d48]
mov ecx, ebx
push eax
call fcn.004949d0
push str.Kingsoftwps
push eax
lea eax, [ebp - 0x1d30]
mov byte [ebp - 4], 0x32
push eax
call fcn.004297b0
mov eax, dword [eax]
sub eax, 0x10
mov byte [ebp - 4], 0x33
push eax
call fcn.00429b20
add eax, 0x10
add esp, 0x10
mov dword [ebp - 0x1aa0], eax
lea eax, [ebp - 0x1a84]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x1a9c]
call fcn.00444b00
cmp dword [ebp - 0x1d50], 0xaaaaaaa
mov eax, dword [ebp - 0x1d54]
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x1d2c], eax
je 0x49b254
lea eax, [ebp - 0x1d54]
mov dword [ebp - 0x1d60], eax
push 1
mov ecx, eax
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x1d5c], 0
call fcn.0049ee10
mov ecx, dword [ebp - 0x1aa0]
mov esi, eax
add ecx, 0xfffffff0
mov dword [ebp - 0x1d5c], esi
push ecx
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [esi + 8], eax
mov ecx, dword [ebp - 0x1a98]
mov eax, dword [ebp - 0x1a9c]
mov edx, dword [ebp - 0x1a94]
mov dword [ebp - 0x1a94], 0
mov dword [ebp - 0x1a98], 0
mov dword [ebp - 0x1a9c], 0
mov dword [esi + 0x10], ecx
mov ecx, dword [ebp - 0x1d2c]
mov dword [esi + 0xc], eax
mov dword [esi + 0x14], edx
inc dword [ebp - 0x1d50]
mov eax, dword [ecx + 4]
mov dword [esi], ecx
mov dword [esi + 4], eax
mov dword [ecx + 4], esi
lea ecx, [ebp - 0x1a9c]
mov dword [eax], esi
call fcn.004296c0
mov edx, dword [ebp - 0x1aa0]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ad4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d30]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ad6a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d48]
mov eax, edi
mov byte [ebp - 4], 0x2d
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ad8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x1d54]
mov esi, dword [ecx]
cmp esi, ecx
je 0x49adb6
lea eax, [esi + 0xc]
push eax
push 1
push dword [esi + 8]
call fcn.0047a650
mov eax, dword [esi]
add esp, 0xc
mov ecx, dword [ebp - 0x1d54]
mov esi, eax
cmp eax, ecx
jne 0x49ad97
mov esi, dword [ebp - 0x1a84]
test esi, esi
je 0x49ae38
mov eax, dword [ebp - 0x1a80]
cmp esi, eax
je 0x49adfc
mov ebx, eax
lea esp, [esp]
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ade9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x49add0
mov esi, dword [ebp - 0x1a84]
mov ebx, dword [ebp - 0x1d58]
mov eax, dword [ebp - 0x1a7c]
lea ecx, [ebp - 0x1a84]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.0042a270
mov ecx, dword [ebp - 0x1d54]
mov dword [ebp - 0x1a84], 0
mov dword [ebp - 0x1a80], 0
mov dword [ebp - 0x1a7c], 0
mov eax, dword [ecx + 4]
mov dword [eax], 0
mov esi, dword [ecx]
test esi, esi
je 0x49ae91
jmp 0x49ae50
mov eax, dword [esi]
lea ecx, [esi + 0xc]
mov dword [ebp - 0x1d48], eax
call fcn.004296c0
mov edx, dword [esi + 8]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ae7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x18
push esi
call fcn.00558004
mov eax, dword [ebp - 0x1d48]
add esp, 8
mov esi, eax
test eax, eax
jne 0x49ae50
push 0x18
push dword [ebp - 0x1d54]
call fcn.00558004
mov esi, dword [ebp - 0x1d3c]
add esp, 8
mov byte [ebp - 4], 0xa
test esi, esi
je 0x49af04
mov eax, dword [ebp - 0x1d38]
cmp esi, eax
je 0x49aeec
mov ebx, eax
jmp 0x49aec0
mov edx, dword [esi]
mov eax, edi
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49aed9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, ebx
jne 0x49aec0
mov esi, dword [ebp - 0x1d3c]
mov ebx, dword [ebp - 0x1d58]
mov eax, dword [ebp - 0x1d34]
lea ecx, [ebp - 0x1d3c]
sub eax, esi
sar eax, 2
push eax
push esi
call fcn.0042a270
push 0x11
push 0x10
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49af25
push dword [ebx + 0x28]
push 0x11
push 0x10
call eax
add esp, 0xc
cmp dword [ebx + 0x20], 0
mov ecx, 0x5b4868
mov eax, 0x5b6e0c
cmove eax, ecx
lea ecx, [ebp - 0x1d2c]
push eax
call fcn.00444a50
mov eax, dword [ebp - 0x1d2c]
lea ecx, [ebp - 0x1d2c]
mov dword [ebp - 0x1a84], 4
mov byte [ebp - 4], 0x37
mov eax, dword [eax - 0xc]
lea eax, [eax*2 + 2]
push eax
mov dword [ebp - 0x1a80], eax
call fcn.0046fca0
mov dword [ebp - 0x1a7c], eax
mov ecx, ebx
lea eax, [ebp - 0x1a84]
push eax
call fcn.0049b5c0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49afa7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.0048c880
call fcn.0047dc20
test eax, eax
je 0x49afbe
mov ecx, ebx
call fcn.0048a2a0
push 0x11
push 0x11
mov ecx, 0x63cfb0
call fcn.004bebd0
mov eax, dword [ebx + 0x54]
test eax, eax
je 0x49afdf
push dword [ebx + 0x28]
push 0x11
push 0x11
call eax
add esp, 0xc
cmp dword [ebx + 0xdc], 0
je 0x49b05d
lea eax, [ebp - 0x1d2c]
mov ecx, ebx
push eax
call fcn.00494730
mov eax, dword [ebp - 0x1d2c]
lea ecx, [ebp - 0x1d2c]
mov dword [ebp - 0x1a84], 3
mov byte [ebp - 4], 0x38
mov eax, dword [eax - 0xc]
lea eax, [eax*2 + 2]
push eax
mov dword [ebp - 0x1a80], eax
call fcn.0046fca0
mov dword [ebp - 0x1a7c], eax
mov ecx, ebx
lea eax, [ebp - 0x1a84]
push eax
call fcn.0049b5c0
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b06e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49b06e
push ecx
push esp
mov ecx, ebx
call fcn.00494730
call fcn.004b3e50
add esp, 4
mov ecx, ebx
call fcn.0049eb40
call fcn.00442180
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x49b0a1
push dword [ebx + 0x8c]
push 0
call esi
push 0
push eax
push dword [ebx + 0xdc]
push 0x67
call fcn.004394e0
add esp, 0x10
call fcn.00442150
test eax, eax
je 0x49b0c3
push 0
push dword [ebx + 0x8c]
push 0
call esi
push eax
push 0
push 0x69
call fcn.004394e0
add esp, 0x10
cmp dword [ebx + 0x20], 0
jne 0x49b1eb
push 0x208
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x1d48]
mov ecx, ebx
push eax
call fcn.004949d0
push dword [eax]
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.0056b39c
mov edx, dword [ebp - 0x1d48]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b124
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.kingsoft
lea eax, [ebp - 0x1870]
push 0x104
push eax
call fcn.0056b327
push 1
lea eax, [ebp - 0x1870]
push 0
push eax
call fcn.0047f220
push 0x208
lea eax, [ebp - 0x1a78]
push 0
push eax
call fcn.0055c530
add esp, 0x24
lea eax, [ebp - 0x1a78]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x1a78]
push eax
lea ecx, [ebp - 0x1d2c]
call fcn.00444a50
push str.kingsoft
push eax
lea eax, [ebp - 0x1d48]
mov byte [ebp - 4], 0x39
push eax
call fcn.004297b0
push 1
push 1
push dword [eax]
mov byte [ebp - 4], 0x3a
call fcn.0047f220
mov edx, dword [ebp - 0x1d48]
add esp, 0x18
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b1ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1d2c]
mov eax, edi
mov byte [ebp - 4], 0xa
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49b1eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, ebx
call fcn.0049df00
mov eax, dword [ebp - 0x1d44]
xor ebx, ebx
cmp dword [ebp - 0x1d40], ebx
sete bl
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
jg 0x49b218
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00557e89
mov esp, ebp
pop ebp
ret
call fcn.00566a14
push 0x80004005
call fcn.00429b00
call fcn.00566a14
push 0x80004005
call fcn.00429b00
push str.list_too_long
call fcn.005595eb
int3