Function at 0x409d60
Capabilities:
Check if file exists
Delete directory
Get common file path
Get file attributes
Move file
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x472f23
mov eax, dword fs:[0]
push eax
sub esp, 0x468
mov eax, dword [0x498068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x3b4], ebx
call fcn.00401900
lea edx, [ebp - 0x350]
mov dword [ebp - 4], ebx
lea ecx, [ebx + 0x6c]
call fcn.0042c0b0
push 0x11
xor eax, eax
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
lea ecx, [ebp - 0x278]
push 0x485f20
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
call fcn.00401a50
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x350]
call fcn.00427150
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x409e4a
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409e40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba0a
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 3
call fcn.00401810
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call esi
cmp eax, 0xffffffff
je 0x409e98
shr eax, 4
and al, 1
je 0x409e98
mov dl, 1
lea ecx, [ebp - 0x3b0]
call fcn.00427e90
push 0x17
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0
lea ecx, [ebp - 0x278]
push str.TencentQQPluginCommon
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
call fcn.00401a50
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x398]
push eax
lea ecx, [ebp - 0x350]
call fcn.00427150
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x409f3c
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409f32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba0f
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0xa
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x409f84
shr eax, 4
and al, 1
je 0x409f84
mov dl, 1
lea ecx, [ebp - 0x398]
call fcn.00427e90
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0xb
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push str.InstallPath
mov byte [ecx], al
call fcn.004069a0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x10
call fcn.00442050
add esp, 0x18
lea eax, [ebp - 0x2f0]
lea ecx, [ebp - 0x338]
push eax
call fcn.00401920
mov byte [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0x13
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push 0x484dfc
mov byte [ecx], al
call fcn.004069a0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x14
call fcn.00442050
add esp, 0x18
lea eax, [ebp - 0x2d8]
lea ecx, [ebp - 0x2c0]
push eax
call fcn.00401920
lea eax, [ebp - 0x290]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x338]
call fcn.00427430
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x17
call fcn.00401920
lea ecx, [ebp - 0x230]
call fcn.00427330
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x338]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00401a50
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x17
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x16
call fcn.00401850
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427430
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x19
call fcn.00401920
lea ecx, [ebp - 0x230]
call fcn.00427330
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
push eax
call fcn.00401a50
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x19
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x16
call fcn.00401850
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push 0xd
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x484ddc
mov byte [ecx], 0
call fcn.004069a0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 0x1c
call fcn.00441ca0
add esp, 0x18
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
push 0x12
push str.TencentQQQQCloud
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x350]
call fcn.00427150
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a293
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a289
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba14
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x20
call fcn.00401900
lea edx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x338]
call fcn.00426850
test al, al
jne 0x40a417
lea ecx, [ebp - 0x2a8]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a2fc
mov dl, 1
lea ecx, [ebp - 0x2a8]
call fcn.00427e90
push 0xf
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.BinQQCloud.dll
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x27
cmp ecx, eax
je 0x40a383
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x40a374
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x260]
call fcn.00401a50
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x26
call fcn.00401850
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a3d6
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a3cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba19
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x25
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a417
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.00427e90
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x20
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x1c
call fcn.00401850
push 5
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.pubno
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x338]
call fcn.00427150
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a4d9
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a4cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba1e
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x2e
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40a51a
xor dl, dl
lea ecx, [ebp - 0x380]
call fcn.00427e90
push 0xf
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push str.Binmsimg32.dll
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x338]
call fcn.00427150
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40a5be
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a5b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba23
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x35
call fcn.00401810
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
je 0x40a8b5
cmp dword [0x49ad28], 0
jg 0x40a66a
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x6f
call edi
push 0x6f
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x46c]
mov ebx, 1
mov edx, str.msimg32.dll_Exists
mov dword [ebp - 0x3b4], ebx
call fcn.00407b40
mov dword [ebp - 4], 0x35
test bl, 1
je 0x40a68a
and ebx, 0xfffffffe
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x308]
call fcn.00427e90
test al, al
jne 0x40a8b5
cmp dword [0x49ad28], 0
jg 0x40a70b
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x72
call edi
push 0x72
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
or ebx, 2
mov byte [ebp - 4], 0x3b
mov edx, str.delete_msimg32.dll_failed
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407b40
mov dword [ebp - 4], 0x35
test bl, 2
je 0x40a72b
and ebx, 0xfffffffd
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
lea ecx, [ebp - 0x260]
call fcn.0042b540
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x308]
call fcn.00426fd0
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x40a79f
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a795
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba28
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x308]
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x40a8a6
cmp dword [0x49ad28], eax
jg 0x40a854
push eax
push 0x75
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
mov byte [ebp - 4], 0x43
lea ecx, [eax + 8]
or ebx, 4
mov edx, str.move_msimg32.dll_to
mov dword [ebp - 0x3b4], ebx
call fcn.00407b40
cmp dword [ebp - 0x21c], 8
lea edx, [ebp - 0x230]
mov ecx, eax
cmovae edx, dword [ebp - 0x230]
call fcn.004263f0
mov edx, str._failed
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x3e
test bl, 4
je 0x40a874
and ebx, 0xfffffffb
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x230]
push 4
cmovae ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x35
call fcn.00401850
push 0x1a
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.PluginCom.Tencent.NetDisk
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov dl, 1
mov byte [ebp - 4], 0x45
mov ecx, eax
call fcn.00427e90
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x44
call fcn.00401850
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40a975
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a96b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba2d
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x35
call fcn.00401900
lea edx, [ebp - 0x368]
mov byte [ebp - 4], 0x4a
mov ecx, 0x6f
call fcn.0042c0b0
test al, al
je 0x40adbd
push 0x2f
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.GoogleChromeApplicationplugins_npactivex.dll
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x368]
call fcn.00427150
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40aa61
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40aa57
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba32
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x248]
push 0x2e
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.GoogleChromeApplicationplugins_npchrome.dll
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x368]
call fcn.00427150
mov byte [ebp - 4], 0x55
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40ab18
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ab0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba37
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x54
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40ac6c
cmp dword [0x49ad28], 0
jg 0x40abbf
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x8b
call edi
push 0x8b
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
or ebx, 8
mov byte [ebp - 4], 0x59
mov edx, str.npactivex.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407b40
mov dword [ebp - 4], 0x54
test bl, 8
je 0x40abdf
and ebx, 0xfffffff7
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x2a8]
call fcn.00427e90
test al, al
jne 0x40ac6c
cmp dword [0x49ad28], 0
jg 0x40ac2a
push 0
push 0x8d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
or ebx, 0x10
mov byte [ebp - 4], 0x5a
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npactivex.dll_file_failed__delete_after_reboot
call fcn.00407b40
mov dword [ebp - 4], 0x54
test bl, 0x10
je 0x40ac4a
and ebx, 0xffffffef
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
lea ecx, [ebp - 0x2a8]
call fcn.00406940
cmp eax, 0x104
jae 0x40ac6c
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x260]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40ad9f
cmp dword [0x49ad28], 0
jg 0x40acf2
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0x93
call edi
push 0x93
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
or ebx, 0x20
mov byte [ebp - 4], 0x5b
mov edx, str.npchrome.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407b40
mov dword [ebp - 4], 0x54
test bl, 0x20
je 0x40ad12
and ebx, 0xffffffdf
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.00427e90
test al, al
jne 0x40ad9f
cmp dword [0x49ad28], 0
jg 0x40ad5d
push 0
push 0x95
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
or ebx, 0x40
mov byte [ebp - 4], 0x5c
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npchrome.dll_file_failed__delete_after_reboot
call fcn.00407b40
mov dword [ebp - 4], 0x54
test bl, 0x40
je 0x40ad7d
and ebx, 0xffffffbf
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
lea ecx, [ebp - 0x260]
call fcn.00406940
cmp eax, 0x104
jae 0x40ad9f
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x4d
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x4a
call fcn.00401850
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452a30
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 0x2b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jne 0x40b328
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ae20
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x290]
call fcn.00401920
mov byte [ebp - 4], 0x60
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40ae9c
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ae92
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba3c
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x248]
push 0x1d
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.TencentNpchrome_npchrome.dll
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x290]
call fcn.00427150
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40af53
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40af49
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba41
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x230]
push 0x1d
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.Tencent_npqscall_npqscall.dll
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x290]
call fcn.00427150
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40b00a
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b000
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba46
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x6d
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40b170
cmp dword [0x49ad28], 0
jg 0x40b0b4
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0xa3
call edi
push 0xa3
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
or ebx, 0x80
mov byte [ebp - 4], 0x72
mov edx, str.npchrome.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407b40
mov dword [ebp - 4], 0x6d
test bl, bl
jns 0x40b0d6
and ebx, 0xffffff7f
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x260]
call fcn.00427e90
test al, al
jne 0x40b170
cmp dword [0x49ad28], 0
jg 0x40b128
push 0
push 0xa5
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
or ebx, 0x100
mov byte [ebp - 4], 0x73
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npchrome.dll_file_failed__delete_after_reboot
call fcn.00407b40
mov dword [ebp - 4], 0x6d
test ebx, 0x100
je 0x40b14e
and ebx, 0xfffffeff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
lea ecx, [ebp - 0x260]
call fcn.00406940
cmp eax, 0x104
jae 0x40b170
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0x2a8]
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40b2fb
cmp dword [0x49ad28], 0
jg 0x40b1f9
sub esp, 8
mov dword [ebp - 0x474], 0
lea ecx, [ebp - 0x46c]
call fcn.004235a0
mov dword [ebp - 0x3d0], str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
mov dword [ebp - 0x3cc], 0xab
call edi
push 0xab
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3c8], eax
call fcn.00426000
or ebx, 0x200
mov byte [ebp - 4], 0x74
mov edx, str.npqscall.dll_file_Exists
mov dword [ebp - 0x3b4], ebx
lea ecx, [ebp - 0x46c]
call fcn.00407b40
mov dword [ebp - 4], 0x6d
test ebx, 0x200
je 0x40b21f
and ebx, 0xfffffdff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x2a8]
call fcn.00427e90
test al, al
jne 0x40b2cd
cmp dword [0x49ad28], 0
jg 0x40b271
push 0
push 0xad
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
or ebx, 0x400
mov byte [ebp - 4], 0x75
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_npqscall.dll_file_failed__delete_after_reboot
call fcn.00407b40
mov dword [ebp - 4], 0x6d
test ebx, 0x400
je 0x40b297
and ebx, 0xfffffbff
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x3b4], ebx
call fcn.00425b00
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00426ca0
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.00406940
cmp eax, 0x104
jae 0x40b2ec
push 5
push 0
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x40b2ec
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00426ca0
xor dl, dl
mov byte [ebp - 4], 0x77
mov ecx, eax
call fcn.00427e90
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x6d
call fcn.00401850
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x66
call fcn.00401850
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x5f
call fcn.00401850
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x4a
call fcn.00401850
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3bc], 0
push 0x2001f
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x78
push eax
push str.SoftwareTencentQQ2009
push ecx
lea ecx, [ebp - 0x3c0]
call fcn.004249f0
test eax, eax
jne 0x40b3e9
push eax
push eax
push eax
push eax
push str.oversion
push dword [ebp - 0x3c0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x40b3e9
push str.oversion
lea ecx, [ebp - 0x3c0]
call fcn.00424c20
test eax, eax
je 0x40b3e9
cmp dword [0x49ad28], 0
jg 0x40b3cf
push 0
push 0xbd
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstallclear_install_dir.cpp
lea ecx, [ebp - 0x474]
call fcn.00425970
or ebx, 0x800
mov byte [ebp - 4], 0x79
lea ecx, [eax + 8]
mov dword [ebp - 0x3b4], ebx
mov edx, str.delete_value_oversion_failed
call fcn.00407b40
mov dword [ebp - 4], 0x78
test ebx, 0x800
je 0x40b3e9
lea ecx, [ebp - 0x474]
call fcn.00425b00
push 9
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x230]
push str.BinTXSSO
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x7a
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov dl, 1
mov byte [ebp - 4], 0x7b
mov ecx, eax
call fcn.00427e90
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x7a
call fcn.00401850
mov byte [ebp - 4], 0x7c
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40b4a9
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b49f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba4b
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push 0x486364
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x80
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov byte [ebp - 4], 0x81
cmp dword [eax + 0x14], 8
jb 0x40b528
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push eax
call esi
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x80
call fcn.00401850
mov byte [ebp - 4], 0x82
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40b584
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b57a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba50
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x230]
push 0x15
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.PluginCom.Tencent.QT
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x86
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov dl, 1
mov byte [ebp - 4], 0x87
mov ecx, eax
call fcn.00427e90
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x86
call fcn.00401850
mov byte [ebp - 4], 0x88
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40b657
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b64d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba55
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x248]
push 0x1d
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
push str.PluginCom.Tencent.AudioVideo
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.00401a50
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov dl, 1
mov byte [ebp - 4], 0x8d
mov ecx, eax
call fcn.00427e90
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x8c
call fcn.00401850
mov byte [ebp - 4], 0x8e
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40b72a
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b720
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba5a
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x230]
push 6
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push str.Plugin
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00401a50
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x92
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00427150
mov byte [ebp - 4], 0x93
cmp dword [eax + 0x14], 8
jb 0x40b7a9
mov eax, dword [eax]
push eax
call esi
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x92
call fcn.00401850
mov byte [ebp - 4], 0x94
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x40b7ff
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b7f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba5f
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x40b83b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3c0]
test eax, eax
je 0x40b856
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x3c0], 0
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x35
call fcn.00401850
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 0x2e
call fcn.00401850
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x1c
call fcn.00401850
mov byte [ebp - 4], 0x98
mov edx, dword [ebp - 0x30c]
cmp edx, 0x10
jb 0x40b8c1
mov ecx, dword [ebp - 0x320]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40b8b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba64
push edx
push ecx
call fcn.004501a5
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x14
call fcn.00401850
mov byte [ebp - 4], 0x9c
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x40b92f
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b925
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba69
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x10
call fcn.00401850
mov byte [ebp - 4], 0xa0
mov edx, dword [ebp - 0x2dc]
cmp edx, 8
jb 0x40b99f
mov ecx, dword [ebp - 0x2f0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40b995
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ba6e
push edx
push ecx
call fcn.004501a5
add esp, 8
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x2f0], ax
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 3
call fcn.00401850
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0
call fcn.00401850
lea ecx, [ebp - 0x350]
mov dword [ebp - 4], 0xffffffff
call fcn.00401850
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00450164
mov esp, ebp
pop ebp
ret 4
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
call fcn.0045559f
int3