Function at 0x44ed2b
Capabilities:
Check if file exists
Get common file path
Read .ini file

Disassembly:
push 0x3bc
mov eax, 0x488489
call fcn.00468ad7
and dword [ebp - 0x33c], 0
mov ebx, ecx
call fcn.0044eb48
push str.Execute_before_delete_files_...
push 0x4c1dc0
call fcn.00448b55
mov eax, dword [ebx + 0x8c]
and dword [ebp - 0x354], 0
pop ecx
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebx + 0x88]
pop ecx
mov ecx, dword [eax]
mov dword [ebp - 0x358], ecx
cmp ecx, eax
je 0x44fd12
push dword [ebp - 0x3b0]
inc dword [ebp - 0x354]
push dword [ebp - 0x354]
mov ecx, 0x4c22d8
call fcn.0045676d
xor eax, eax
cmp dword [ebx + 0xc4], eax
je 0x44edba
mov dword [ebp - 0x338], 1
cmp dword [ebx + 0xc8], eax
jne 0x44edc0
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x358]
mov esi, dword [eax + 8]
lea edi, [esi + 4]
push str._sendinstalldyn
mov ecx, edi
call fcn.00417a23
test eax, eax
jne 0x44eeb4
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44eeb4
call fcn.00429718
test eax, eax
je 0x44ee35
push 0
lea eax, [ebp - 0x3a8]
push str.InfoCollect
push eax
call fcn.0043c6a0
add esp, 0xc
and dword [ebp - 4], 0
or dword [ebp - 0x33c], 1
push 0x48c678
mov ecx, eax
call fcn.00417ab1
mov byte [ebp - 0x331], 1
test eax, eax
je 0x44ee3c
mov byte [ebp - 0x331], 0
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x33c], 1
je 0x44ee5e
mov ecx, dword [ebp - 0x3a8]
and dword [ebp - 0x33c], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00417891
cmp byte [ebp - 0x331], 0
jne 0x44fcf8
push 0x4c1160
lea ecx, [ebp - 0x350]
call fcn.004237f4
push 4
lea eax, [ebp - 0x350]
push 0x499150
push eax
mov dword [ebp - 4], 1
call fcn.0041915d
mov eax, dword [ebp - 0x350]
add esp, 0xc
push dword [eax - 0xc]
mov ecx, edi
push eax
call fcn.00417d0b
mov ecx, dword [ebp - 0x350]
jmp 0x44f8a7
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44eef7
push 0x15
lea eax, [ebp - 0x380]
push eax
mov ecx, edi
call fcn.00418d7f
push 2
pop edx
or dword [ebp - 0x33c], edx
push str._deletelink_startmenu
mov ecx, eax
mov dword [ebp - 4], edx
call fcn.00417a23
mov byte [ebp - 0x331], 1
test eax, eax
je 0x44eefe
mov byte [ebp - 0x331], 0
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x33c], 2
je 0x44ef20
mov ecx, dword [ebp - 0x380]
and dword [ebp - 0x33c], 0xfffffffd
add ecx, 0xfffffff0
call fcn.00417891
cmp byte [ebp - 0x331], 0
je 0x44f0c8
cmp byte [0x4be8a4], 0
je 0x44f5c3
push str.Read_Start_Menu_Directory_From_Windows_Registry_And_Delete_It.
push 0x4c1dc0
mov byte [0x4be8a4], 0
call fcn.00448b55
pop ecx
pop ecx
lea eax, [ebp - 0x348]
push eax
mov ecx, ebx
call fcn.0044ca13
mov eax, dword [ebp - 0x348]
cmp dword [eax - 0xc], 0
mov dword [ebp - 4], 3
je 0x44f0ac
push eax
push str.Read_Start_Menu_Directory_From_Windows_Registry_Successfully._Menu_Directory___ws
push 0x4c1dc0
call fcn.00448b55
add esp, 0xc
push 0
push 0x48faac
mov ecx, edi
call fcn.0042b70e
cmp eax, 0xffffffff
je 0x44f0bd
push eax
lea eax, [ebp - 0x344]
push eax
mov ecx, edi
call fcn.00418d7f
mov edi, 0x48faac
push edi
mov byte [ebp - 4], 4
call fcn.00468f76
pop ecx
push eax
push edi
lea ecx, [ebp - 0x344]
call fcn.00417d0b
mov eax, dword [ebp - 0x348]
push dword [eax - 0xc]
lea ecx, [ebp - 0x344]
push eax
call fcn.00417d0b
push edi
call fcn.00468f76
pop ecx
push eax
push edi
lea ecx, [ebp - 0x344]
call fcn.00417d0b
cmp dword [ebp - 0x338], 0
je 0x44f05c
cmp dword [ebx + 0xc8], 0
je 0x44f05c
push dword [esi + 0xc]
mov edi, dword [ebp - 0x344]
push dword [esi + 8]
lea eax, [edi - 0x10]
push ecx
mov dword [ebp - 0x34c], esp
mov dword [ebp - 0x338], esp
push eax
call fcn.00417b88
mov ecx, dword [ebp - 0x338]
add eax, 0x10
mov dword [ecx], eax
mov eax, esp
mov dword [ebp - 0x338], esp
push esi
lea ecx, [ebx + 0xc]
push ecx
push eax
mov byte [ebp - 4], 5
call fcn.00419092
add esp, 0xc
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.00449e53
jmp 0x44f099
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.00419092
mov edi, dword [ebp - 0x344]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov byte [ebp - 4], 6
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3b8]
add esp, 0x20
add ecx, 0xfffffff0
call fcn.00417891
lea ecx, [edi - 0x10]
call fcn.00417891
mov ecx, dword [ebp - 0x348]
jmp 0x44fcec
push str.Failed_to_Read_Start_Menu_Directory_From_Windows_Registry.
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
mov ecx, dword [ebp - 0x348]
jmp 0x44f8a7
push str.killproc
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f0f8
push dword [edi]
push str.Kill_Process:_ws
push 0x4c1dc0
call fcn.00448b55
push dword [edi]
call fcn.00446768
add esp, 0x10
jmp 0x44fcf8
push str.StopPluginHost
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f18c
push dword [edi]
push str.Stopping_wpscloudsvr:_ws
push 0x4c1dc0
call fcn.00448b55
add esp, 0xc
mov esi, str.wpscloudsvr
push esi
lea ecx, [ebp - 0x370]
call fcn.00418067
lea eax, [ebp - 0x370]
push eax
mov dword [ebp - 4], 7
call fcn.004459d8
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x370]
add ecx, 0xfffffff0
call fcn.00417891
lea eax, [ebx + 0xc]
push eax
call fcn.00447a1e
pop ecx
push esi
lea ecx, [ebp - 0x360]
call fcn.00418067
lea eax, [ebp - 0x360]
push eax
mov dword [ebp - 4], 8
call fcn.004459d8
pop ecx
mov ecx, dword [ebp - 0x360]
jmp 0x44fcec
push str.regsvr32
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f208
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00466c70
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea eax, [ebp - 0x218]
push str.System32_regsvr32.exe
push eax
call fcn.0046b7e9
push dword [edi]
push str.Regsvr32:_ws
push 0x4c1dc0
call fcn.00448b55
push 1
push 0
push 0xffffffffffffffff
push dword [edi]
lea eax, [ebp - 0x218]
push eax
call fcn.004452b2
add esp, 0x28
jmp 0x44fcf8
push str._unregmtfont
mov ecx, edi
call fcn.00417a23
test eax, eax
jne 0x44f274
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f274
push dword [edi]
push dword [esi]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.00419092
mov edi, dword [edi]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov dword [ebp - 4], 9
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3c0]
add esp, 0x30
jmp 0x44fcec
push str._unsetappcap
mov ecx, edi
call fcn.00417a23
test eax, eax
jne 0x44f2e0
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f2e0
push dword [edi]
push dword [esi]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3c8]
push eax
call fcn.00419092
mov edi, dword [edi]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov dword [ebp - 4], 0xa
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3c8]
add esp, 0x30
jmp 0x44fcec
push str._unassopic
mov ecx, edi
call fcn.00417a23
test eax, eax
jne 0x44f34c
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f34c
push dword [edi]
push dword [esi]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3c4]
push eax
call fcn.00419092
mov edi, dword [edi]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov dword [ebp - 4], 0xb
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3c4]
add esp, 0x30
jmp 0x44fcec
push str.UninstallQing
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f379
push str.Do_Qing_Uninstall.
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
mov ecx, ebx
call fcn.0044ac5d
jmp 0x44fcf8
push str.UninstallPdf2wordSdk
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f3b1
call fcn.00429598
test eax, eax
je 0x44fcf8
push str.Do_Pdf2wordSdk_Uninstall.
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
call fcn.0044e8a3
jmp 0x44fcf8
push str.UnRegisterDataMaster
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f3ec
push str.Do_UnRegisterDataMaster
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
xor esi, esi
push esi
push esi
mov ecx, ebx
call fcn.0044e277
push 1
push esi
mov ecx, ebx
call fcn.0044e277
jmp 0x44fcf8
push str.UnRegisterKpdf2WordShellExt
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f427
push str.Do_UnRegisterKpdf2WordShellExt
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
xor esi, esi
push esi
push esi
mov ecx, ebx
call fcn.0044e42b
push 1
push esi
mov ecx, ebx
call fcn.0044e42b
jmp 0x44fcf8
push str.UnRegisterPhoto2PdfShellExt
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f458
push str.Do_UnRegisterPhoto2PdfShellExt
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
push 0
push 0
mov ecx, ebx
call fcn.0044ce96
jmp 0x44fcf8
push str.UnRegisterYunpan
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f4a2
push str.Do_UnRegisterYunpan
push 0x4c1dc0
call fcn.00448b55
mov eax, dword [ebx + 0xc]
pop ecx
pop ecx
push 0
push ecx
sub eax, 0x10
mov dword [ebp - 0x34c], esp
mov esi, esp
push eax
call fcn.00417b88
pop ecx
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.0044cd95
jmp 0x44fcf8
push str.DeleteExternalTask
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f4f2
push str.Deleting_external_task.
push 0x4c1dc0
call fcn.00448b55
pop ecx
pop ecx
push str.WpsExternal_
lea ecx, [ebp - 0x364]
call fcn.00418067
lea eax, [ebp - 0x364]
push eax
mov dword [ebp - 4], 0xc
call fcn.00447cd8
pop ecx
mov ecx, dword [ebp - 0x364]
jmp 0x44fcec
push str.wtoolexwpsupdatesvr.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f578
lea eax, [ebx + 0xc]
push esi
push eax
lea eax, [ebp - 0x38c]
push eax
call fcn.00419092
push dword [edi]
mov dword [ebp - 4], 0xd
push dword [eax]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
mov ecx, dword [ebp - 0x38c]
or dword [ebp - 4], 0xffffffff
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.00417891
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3ac]
push eax
call fcn.00419092
mov edi, dword [edi]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov dword [ebp - 4], 0xe
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3ac]
jmp 0x44fce9
push str.wtoolexwpsnotify.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
je 0x44f598
push str.wtoolexwpsupdate.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f5a8
push str._deltasks
mov ecx, edi
call fcn.00417a23
test eax, eax
je 0x44f5bc
push str.wtoolexwpsofficeupdate.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f6dc
and dword [ebp - 0x338], 0
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f610
push 0x11
lea eax, [ebp - 0x388]
push eax
mov ecx, edi
call fcn.00417c29
or dword [ebp - 0x33c], 4
push str._forceperusermode
mov ecx, eax
mov dword [ebp - 4], 0x24
call fcn.00417a23
test eax, eax
jne 0x44f610
mov byte [ebp - 0x331], 1
cmp dword [ebx + 0xc4], eax
jne 0x44f617
mov byte [ebp - 0x331], 0
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x33c], 4
je 0x44f639
mov ecx, dword [ebp - 0x388]
and dword [ebp - 0x33c], 0xfffffffb
add ecx, 0xfffffff0
call fcn.00417891
cmp byte [ebp - 0x331], 0
lea eax, [ebx + 0xc]
push esi
push eax
je 0x44fc30
lea eax, [ebp - 0x390]
push eax
call fcn.00419092
push dword [edi]
mov dword [ebp - 4], 0x25
push dword [eax]
push str.Send_msg_to_run_app:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
mov ecx, dword [ebp - 0x390]
or dword [ebp - 4], 0xffffffff
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.00417891
push dword [esi + 0xc]
mov edi, dword [edi]
push dword [esi + 8]
sub edi, 0x10
push ecx
mov dword [ebp - 0x34c], esp
mov dword [ebp - 0x338], esp
push edi
call fcn.00417b88
mov ecx, dword [ebp - 0x338]
add eax, 0x10
mov dword [ecx], eax
mov dword [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x338], esp
push esi
lea eax, [ebx + 0xc]
push eax
push ecx
call fcn.00419092
or dword [ebp - 4], 0xffffffff
add esp, 0xc
mov ecx, ebx
call fcn.00449e53
jmp 0x44fcf8
push str.UninstallCloudSvr
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f70e
mov ecx, ebx
call fcn.0044b670
push eax
call fcn.004286ae
push eax
push str._INFO__KCloudsvrServiceReferenceMgr::tryUninstall_returned__ld
push 0x4c1dc0
call fcn.00448b55
jmp 0x44f0f0
push str.deleteFirewallRule
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f72a
mov ecx, ebx
call fcn.004492ac
jmp 0x44fcf8
push str.msiexec.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f7f7
mov eax, dword [ebx + 0xc]
sub eax, 0x10
push eax
call fcn.00417b88
add eax, 0x10
mov dword [ebp - 0x340], eax
lea eax, [ebp - 0x340]
push eax
mov dword [ebp - 4], 0xf
call fcn.004461ac
push str.utilityinstall.ini
call fcn.00468f76
add esp, 0xc
push eax
push str.utilityinstall.ini
lea ecx, [ebp - 0x340]
call fcn.00417d0b
push dword [ebp - 0x340]
push 0
push 0x498b80
push str.installinfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 1
jne 0x44f7ec
push dword [ebp - 0x340]
push 0x9c
push str.uselocal
push str.localInfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, 0x188
jne 0x44f7ec
push dword [edi]
push dword [esi]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
mov edi, dword [edi]
mov eax, dword [esi]
push 0
push dword [esi + 0xc]
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
add esp, 0x24
mov ecx, dword [ebp - 0x340]
jmp 0x44fcec
push str.office6ksomisc.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f8b8
push eax
push str._deletetaskbarpin
mov ecx, edi
call fcn.0042b70e
cmp eax, 0xffffffff
je 0x44f8b8
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00466c70
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x44f5c3
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x35c]
call fcn.00418067
push str.KingsoftOffice6TaskBar
mov dword [ebp - 4], 0x10
call fcn.00468f76
pop ecx
push eax
push str.KingsoftOffice6TaskBar
lea ecx, [ebp - 0x35c]
call fcn.00417d0b
push 1
push 1
push dword [ebp - 0x35c]
call fcn.00446ff6
mov ecx, dword [ebp - 0x35c]
add esp, 0xc
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00417891
jmp 0x44f5c3
push str.office6WPSOfficePIA.exe
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f8eb
push dword [edi]
push dword [esi]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
add esp, 0x10
push esi
mov ecx, ebx
call fcn.0044a8cd
jmp 0x44fcf8
push str.UninstallKtpcntr
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f991
push str.WpsKtpcntrQingTask_
lea ecx, [ebp - 0x36c]
call fcn.00418067
lea eax, [ebp - 0x36c]
push eax
mov dword [ebp - 4], 0x11
call fcn.00447cd8
or dword [ebp - 4], 0xffffffff
pop ecx
mov ecx, dword [ebp - 0x36c]
add ecx, 0xfffffff0
call fcn.00417891
mov eax, dword [ebx + 0xc]
sub eax, 0x10
push eax
call fcn.00417b88
add eax, 0x10
mov dword [ebp - 0x338], eax
mov esi, str.office6ktpcntr.exe
push esi
mov dword [ebp - 4], 0x12
call fcn.00468f76
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0x338]
call fcn.00417d0b
mov esi, dword [ebp - 0x338]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f989
push 0
push 0
push esi
call fcn.00446372
add esp, 0xc
lea ecx, [esi - 0x10]
jmp 0x44fcef
push str.UninstallSurvey
mov ecx, esi
call fcn.00417a23
test eax, eax
jne 0x44f5c3
push str.Support_UninstallSurvey
lea ecx, [ebp - 0x250]
call fcn.00424491
mov ecx, dword [ebx + 0xcc]
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x234]
push eax
mov dword [ebp - 4], 0x13
call fcn.0042ab8e
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x14
jb 0x44f9e1
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x378]
call fcn.00418067
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.0041f501
push 0
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x17
call fcn.0041f501
push str.true
lea ecx, [ebp - 0x378]
call fcn.00417a23
neg eax
sbb eax, eax
inc eax
je 0x44fc25
lea ecx, [ebp - 0x330]
call fcn.00457be7
push edi
lea ecx, [ebx + 0xc0]
mov byte [ebp - 4], 0x18
call fcn.00417f16
push str._distsrc
lea ecx, [ebp - 0x374]
call fcn.0042bda8
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x19
call fcn.00457e9d
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x1a
jb 0x44fa77
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00418067
push eax
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x394]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00419092
add esp, 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebx + 0xc0]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00417d0b
mov ecx, dword [ebp - 0x394]
add ecx, 0xfffffff0
call fcn.00417891
mov ecx, dword [ebp - 0x3bc]
add ecx, 0xfffffff0
call fcn.00417891
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.0041f501
mov ecx, dword [ebp - 0x374]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x18
call fcn.00417891
push str.lang
lea ecx, [ebp - 0x37c]
call fcn.0042bda8
lea eax, [ebp - 0x3b4]
push eax
mov ecx, 0x4c2248
mov byte [ebp - 4], 0x1d
call fcn.0045902d
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x39c]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00419092
add esp, 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebx + 0xc0]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00417d0b
mov ecx, dword [ebp - 0x39c]
add ecx, 0xfffffff0
call fcn.00417891
mov ecx, dword [ebp - 0x3b4]
add ecx, 0xfffffff0
call fcn.00417891
mov ecx, dword [ebp - 0x37c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x18
call fcn.00417891
push 0x498a1c
lea ecx, [ebp - 0x368]
call fcn.0042bda8
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x20
call fcn.00457d77
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x21
jb 0x44fba5
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x384]
call fcn.00418067
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x3a4]
push eax
mov byte [ebp - 4], 0x22
call fcn.00419092
add esp, 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebx + 0xc0]
push eax
mov byte [ebp - 4], 0x23
call fcn.00417d0b
mov ecx, dword [ebp - 0x3a4]
add ecx, 0xfffffff0
call fcn.00417891
mov ecx, dword [ebp - 0x384]
add ecx, 0xfffffff0
call fcn.00417891
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.0041f501
mov ecx, dword [ebp - 0x368]
add ecx, 0xfffffff0
call fcn.00417891
lea ecx, [ebp - 0x330]
call fcn.00449656
mov ecx, dword [ebp - 0x378]
jmp 0x44fcec
lea eax, [ebp - 0x398]
push eax
call fcn.00419092
push dword [edi]
mov dword [ebp - 4], 0x27
push dword [eax]
push str.Run_App:_ws__params_ws
push 0x4c1dc0
call fcn.00448b55
mov ecx, dword [ebp - 0x398]
or dword [ebp - 4], 0xffffffff
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.00417891
cmp dword [ebp - 0x338], 0
je 0x44fcb8
cmp dword [ebx + 0xc8], 0
je 0x44fcb8
cmp dword [esi + 0x10], 0
jne 0x44fcb8
push dword [esi + 0xc]
mov edi, dword [edi]
push dword [esi + 8]
sub edi, 0x10
push ecx
mov dword [ebp - 0x34c], esp
mov dword [ebp - 0x338], esp
push edi
call fcn.00417b88
mov ecx, dword [ebp - 0x338]
add eax, 0x10
mov dword [ecx], eax
mov dword [ebp - 4], 0x28
jmp 0x44f6b6
push esi
lea eax, [ebx + 0xc]
push eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.00419092
mov edi, dword [edi]
mov eax, dword [eax]
push 1
push dword [esi + 0xc]
mov dword [ebp - 4], 0x29
push dword [esi + 8]
push edi
push eax
call fcn.004452b2
mov ecx, dword [ebp - 0x3a0]
add esp, 0x20
add ecx, 0xfffffff0
or dword [ebp - 4], 0xffffffff
call fcn.00417891
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
mov dword [ebp - 0x358], eax
cmp eax, dword [ebx + 0x88]
jne 0x44ed82
call fcn.00429718
test eax, eax
je 0x44fd20
call fcn.0043cd24
call fcn.0042614f
xor eax, eax
inc eax
call fcn.00468b5a
ret