Function at 0x4bb830
Capabilities:
Delete file
Get common file path
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a4d45
mov eax, dword fs:[0]
push eax
sub esp, 0x6e8
mov eax, dword [0x63434c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0x208
push eax
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
lea eax, [ebp - 0x420]
push eax
call fcn.0055c530
add esp, 0xc
lea eax, [ebp - 0x420]
push 0
push 0x1c
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x66c], eax
lea ebx, [ebp - 0x420]
mov dword [ebp - 4], 0
shr ebx, 0x10
lea eax, [ebp - 0x420]
movzx esi, ax
test ebx, ebx
jne 0x4bb8dc
push esi
lea ecx, [ebp - 0x66c]
call fcn.00429d30
jmp 0x4bb907
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bb8e5
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x66c]
call fcn.0042a000
lea eax, [ebp - 0x66c]
mov dword [ebp - 4], 1
push eax
call fcn.0047f130
add esp, 4
lea ecx, [ebp - 0x66c]
push 0xd
push str.kingsoftqing
call fcn.00429970
push 0
push 1
push 1
push dword [ebp - 0x66c]
call fcn.0047a510
add esp, 0x10
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd83d
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x664], eax
mov byte [ebp - 4], 2
test ebx, ebx
jne 0x4bb976
push esi
lea ecx, [ebp - 0x664]
call fcn.00429d30
jmp 0x4bb9a2
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bb980
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x664]
call fcn.0042a000
lea eax, [ebp - 0x664]
mov byte [ebp - 4], 3
push eax
call fcn.0047f130
add esp, 4
lea ecx, [ebp - 0x664]
push 0x12
push str.kingsoftWPS_Cloud
call fcn.00429970
push 0
push 1
push 1
push dword [ebp - 0x664]
call fcn.0047a510
mov edx, dword [ebp - 0x664]
or esi, 0xffffffff
add esp, 0x10
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bb9fb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x66c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bba18
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x20a
lea eax, [ebp - 0x62c]
push 0
push eax
call fcn.0055c530
add esp, 0xc
mov dword [ebp - 4], 4
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x698], eax
push 0x104
lea eax, [ebp - 0x62c]
mov dword [ebp - 4], 5
push eax
push 0x1a
call fcn.0047ca40
lea ecx, [ebp - 0x62c]
add esp, 0xc
lea edx, [ecx + 2]
jmp 0x4bba80
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bba80
sub ecx, edx
lea eax, [ebp - 0x62c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x698]
call fcn.0042a000
lea eax, [ebp - 0x698]
push eax
call fcn.0047f130
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
add esp, 8
mov dword [ebp - 0x6ac], eax
push 0x25
push str.Kingsoftoffice6OfficeSpace_resource
lea ecx, [ebp - 0x6ac]
mov byte [ebp - 4], 6
call fcn.00429970
mov edi, dword [ebp - 0x6ac]
push 0
push 1
push 1
push edi
call fcn.0047a510
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
add esp, 0x14
mov dword [ebp - 0x670], eax
push 0x26
push str.Kingsoftoffice6OfficeSpacewpsoffice
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 7
call fcn.00429970
mov esi, dword [ebp - 0x670]
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bbb4f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bbb6b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [ebp - 0x664], eax
push 0x10
push str.qingdatadefault
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 8
call fcn.00429970
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd847
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x674], eax
mov byte [ebp - 4], 9
test ebx, ebx
jne 0x4bbbd8
lea eax, [ebp - 0x420]
movzx eax, ax
lea ecx, [ebp - 0x674]
push eax
call fcn.00429d30
jmp 0x4bbc03
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bbbe1
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x674]
call fcn.0042a000
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 0xa
push eax
call fcn.0047f130
add esp, 4
lea ecx, [ebp - 0x674]
push 0x1a
push str.kingsoftWPS_Cloudupdate_
call fcn.00429970
push ecx
mov esi, esp
mov dword [ebp - 0x688], esp
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x674]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
mov dword [esi], eax
mov esi, esp
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x664]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xa
call fcn.004b2350
add esp, 8
lea eax, [ebp - 0x698]
lea ecx, [ebp - 0x664]
push eax
call fcn.00429740
push 0x15
push str.kingsoftqingdefault
lea ecx, [ebp - 0x664]
call fcn.00429970
push ecx
mov esi, esp
mov dword [ebp - 0x688], esp
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x674]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
mov dword [esi], eax
mov esi, esp
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x6a8], esi
mov edi, dword [ebp - 0x664]
add edi, 0xfffffff0
push edi
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xa
call fcn.004b2350
push str.upqing.exe
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x680]
push eax
call fcn.004297b0
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0x14
push dword [eax]
call esi
mov edx, dword [ebp - 0x680]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bbd32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.version.ini
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x680]
push eax
call fcn.004297b0
add esp, 0xc
push dword [eax]
call esi
mov edx, dword [ebp - 0x680]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bbd6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [ebp - 0x66c], eax
push 0xd
push str.kingsoftqing
lea ecx, [ebp - 0x66c]
mov byte [ebp - 4], 0xd
call fcn.00429970
push 0
push 1
push 1
push dword [ebp - 0x66c]
call fcn.0047a510
add esp, 0x10
lea eax, [ebp - 0x698]
lea ecx, [ebp - 0x66c]
push eax
call fcn.00429740
push 8
push str.qingdata
lea ecx, [ebp - 0x66c]
call fcn.00429970
mov esi, dword [ebp - 0x66c]
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bbe03
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x674]
or esi, 0xffffffff
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bbe23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bbe3b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x694], eax
mov eax, str.DisableDelAccountData
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x694]
test eax, 0xffff0000
jne 0x4bbe79
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bbe85
push 0x15
push str.DisableDelAccountData
call fcn.0042a000
lea eax, [ebp - 0x694]
mov byte [ebp - 4], 0xf
push eax
call fcn.004b5100
mov edx, dword [ebp - 0x694]
add esp, 4
test eax, eax
mov byte [ebp - 4], 5
mov eax, esi
sete bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bbebe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x4bbf1e
lea eax, [ebp - 0x668]
mov ecx, 0x63cd10
push eax
call fcn.00494140
push 0x15
push str.Kingsoftkaccountsdk
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0x10
call fcn.00429970
push 0
push 1
push 0
push dword [ebp - 0x668]
call fcn.0047a510
mov edx, dword [ebp - 0x668]
add esp, 0x10
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bbf1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x6b0]
mov ecx, 0x63cd10
push eax
call fcn.00494420
push 0x27
push str.KingsoftWPS_Cloud_Filesuserdataqing
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x11
call fcn.00429970
push str.config.ini
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x6d0]
push eax
call fcn.004297b0
add esp, 0xc
cmp dword [ebp + 8], 0
mov byte [ebp - 4], 0x12
jne 0x4bd781
lea eax, [ebp - 0x6ac]
mov ecx, 0x63cd10
push eax
call fcn.00494420
push 0x22
push str.KingsoftWPS_Cloud_Filesuserdata
lea ecx, [ebp - 0x6ac]
mov byte [ebp - 4], 0x13
call fcn.00429970
lea eax, [ebp - 0x65c]
push 1
push eax
call fcn.005186e0
add esp, 8
cmp dword [ebp - 0x64c], 0
mov byte [ebp - 4], 0x14
je 0x4bbfe5
cmp dword [ebp - 0x648], 8
lea eax, [ebp - 0x65c]
push str.zh_CN
cmovae eax, dword [ebp - 0x65c]
push eax
call fcn.00566ed2
add esp, 8
test eax, eax
je 0x4bbfe5
mov eax, 0x5c5f44
mov ecx, 8
jmp 0x4bbfef
mov eax, str.qing
mov ecx, 5
push ecx
push eax
lea ecx, [ebp - 0x6ac]
call fcn.00429970
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd851
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x694], eax
mov eax, str.SOFTWAREKingsoftWPSCloud
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x694]
test eax, 0xffff0000
jne 0x4bc03a
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bc046
push 0x1a
push str.SOFTWAREKingsoftWPSCloud
call fcn.0042a000
mov byte [ebp - 4], 0x17
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd85b
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x690], esi
mov edi, dword [ebp - 0x694]
lea eax, [ebp - 0x664]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x664], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x664]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x68c], 0
test eax, eax
je 0x4bc195
lea ecx, [ebp - 0x68c]
push ecx
push 0
lea ecx, [ebp - 0x670]
push ecx
push 0
push str.NeedUninstallQingUserData
push eax
call ebx
mov eax, dword [ebp - 0x670]
cmp eax, 1
je 0x4bc0e1
cmp eax, 2
jne 0x4bc184
lea ecx, [ebp - 0x690]
call fcn.00429bc0
mov edx, dword [ebp - 0x68c]
shr edx, 1
add edx, 1
js 0x4bd874
mov esi, dword [ebp - 0x690]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bc126
push edx
lea ecx, [ebp - 0x690]
call fcn.00429e50
mov esi, dword [ebp - 0x690]
lea eax, [ebp - 0x68c]
push eax
push esi
lea eax, [ebp - 0x670]
push eax
push 0
push str.NeedUninstallQingUserData
push dword [ebp - 0x664]
call ebx
test eax, eax
jne 0x4bc184
mov eax, dword [ebp - 0x68c]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bc15e
xor eax, eax
jmp 0x4bc172
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x4bd874
cmp eax, dword [esi - 8]
jg 0x4bd874
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bc195
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x664], 0
mov ecx, 0x5b86ec
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4bc1cc
test dx, dx
je 0x4bc1c8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4bc1cc
add eax, 4
add ecx, 4
test dx, dx
jne 0x4bc1a6
xor ebx, ebx
jmp 0x4bc1d1
sbb ebx, ebx
or ebx, 1
mov dword [ebp - 0x664], 0
add esi, 0xfffffff0
mov byte [ebp - 4], 0x16
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc1f7
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4bd61d
xor eax, eax
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], eax
add edi, 0xfffffff0
mov byte [ebp - 4], 0x1b
push edi
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [ebp - 0x690], eax
push 1
push 0x5b4804
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x1c
call fcn.00429970
push 0xa
push str.usercenter
lea ecx, [ebp - 0x690]
call fcn.00429970
mov esi, dword [ebp - 0x690]
lea eax, [ebp - 0x670]
push eax
push 0x2001f
push 0
push esi
push 0x80000001
mov dword [ebp - 0x670], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4bc296
mov edi, dword [ebp - 0x670]
mov dword [ebp - 0x6c8], edi
mov dword [ebp - 0x6c4], eax
jmp 0x4bc298
xor edi, edi
mov byte [ebp - 4], 0x1c
test eax, eax
jne 0x4bd2e8
push eax
push eax
push eax
push eax
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x6e0], eax
lea eax, [ebp - 0x6e0]
push eax
push 0
push 0
lea eax, [ebp - 0x670]
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor ebx, ebx
mov dword [ebp - 0x6a4], ebx
cmp dword [ebp - 0x670], ebx
jbe 0x4bd2c9
jmp 0x4bc2f0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0055c530
add esp, 0xc
mov dword [ebp - 0x6e4], 0x104
lea eax, [ebp - 0x6f4]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x218]
push eax
push ebx
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x4bd2b6
add esi, 0xfffffff0
push esi
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [ebp - 0x68c], eax
push 1
push 0x5b4804
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 0x1e
call fcn.00429970
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc370
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x68c]
call fcn.00429970
mov byte [ebp - 4], 0x1f
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x660], esi
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 0x21
push eax
push 0x20019
push 0
push dword [ebp - 0x68c]
mov dword [ebp - 0x674], 0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x668], 0
test eax, eax
je 0x4bc4e1
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x668]
push ecx
push 0
lea ecx, [ebp - 0x6cc]
push ecx
push 0
push str.cacheFileRoot
push eax
call ebx
mov eax, dword [ebp - 0x6cc]
cmp eax, 1
je 0x4bc42c
cmp eax, 2
jne 0x4bc4cf
lea ecx, [ebp - 0x660]
call fcn.00429bc0
mov edx, dword [ebp - 0x668]
shr edx, 1
add edx, 1
js 0x4bd874
mov esi, dword [ebp - 0x660]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bc471
push edx
lea ecx, [ebp - 0x660]
call fcn.00429e50
mov esi, dword [ebp - 0x660]
lea eax, [ebp - 0x668]
push eax
push esi
lea eax, [ebp - 0x6cc]
push eax
push 0
push str.cacheFileRoot
push dword [ebp - 0x674]
call ebx
test eax, eax
jne 0x4bc4cf
mov eax, dword [ebp - 0x668]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bc4a9
xor eax, eax
jmp 0x4bc4bd
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x4bd874
cmp eax, dword [esi - 8]
jg 0x4bd874
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x674]
test eax, eax
je 0x4bc4e1
push eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov dword [ebp - 0x674], 0
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x668], eax
mov eax, 0x5b4808
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x668]
test eax, 0xffff0000
jne 0x4bc529
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bc535
push 1
push 0x5b4808
call fcn.0042a000
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x23
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc542
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x668]
call fcn.00429970
cmp dword [esi - 0xc], 0
lea ebx, [esi - 0x10]
mov edi, dword [ebp - 0x668]
mov dword [ebp - 0x684], ebx
je 0x4bc5d8
push ecx
lea eax, [edi - 0x10]
mov dword [ebp - 0x678], esp
mov ebx, esp
push eax
mov dword [ebp - 0x67c], ebx
call fcn.00429b20
add eax, 0x10
mov dword [ebx], eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x24
mov ebx, esp
push eax
mov dword [ebp - 0x67c], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x23
call fcn.004b46b0
add esp, 8
test eax, eax
je 0x4bc5d2
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
mov ebx, dword [ebp - 0x684]
or esi, 0xffffffff
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc5f2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x674]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x4bc605
push eax
call edi
mov dword [ebp - 0x674], 0
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc623
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x25
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
lea eax, [ebp - 0x6a0]
mov byte [ebp - 4], 0x27
push eax
push 0x20019
push 0
push dword [ebp - 0x68c]
mov dword [ebp - 0x6a0], 0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bc76d
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6dc]
push ecx
push 0
push str.syncFileRoot
push eax
call ebx
mov eax, dword [ebp - 0x6dc]
cmp eax, 1
je 0x4bc6bd
cmp eax, 2
jne 0x4bc760
lea ecx, [ebp - 0x668]
call fcn.00429bc0
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4bd874
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bc702
push edx
lea ecx, [ebp - 0x668]
call fcn.00429e50
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6dc]
push eax
push 0
push str.syncFileRoot
push dword [ebp - 0x6a0]
call ebx
test eax, eax
jne 0x4bc760
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bc73a
xor eax, eax
jmp 0x4bc74e
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x4bd874
cmp eax, dword [esi - 8]
jg 0x4bd874
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x6a0]
test eax, eax
je 0x4bc76d
push eax
call edi
mov dword [ebp - 0x6a0], 0
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, 0x5c6014
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bc7b5
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bc7c1
push 4
push 0x5c6014
call fcn.0042a000
cmp dword [esi - 0xc], 0
lea ebx, [esi - 0x10]
mov edi, dword [ebp - 0x660]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x684], ebx
je 0x4bc960
push ecx
lea eax, [edi - 0x10]
mov dword [ebp - 0x67c], esp
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add eax, 0x10
mov dword [ebx], eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2a
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b46b0
add esp, 8
test eax, eax
jne 0x4bc94b
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6e8], ebx
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x2b
test eax, 0xffff0000
jne 0x4bc872
movzx eax, ax
mov ecx, ebx
push eax
call fcn.00429d30
jmp 0x4bc89e
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
jmp 0x4bc880
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc880
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, ebx
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2c
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b46b0
add esp, 8
test eax, eax
jne 0x4bc94b
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6ec], ebx
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, str.WPS_Cloud_Files
mov byte [ebp - 4], 0x2d
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bc911
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bc91d
push 0xf
push str.WPS_Cloud_Files
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2e
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b46b0
add esp, 8
test eax, eax
je 0x4bc95a
push 0
push 1
push 1
push esi
call fcn.0047a510
add esp, 0x10
mov ebx, dword [ebp - 0x684]
or esi, 0xffffffff
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc97a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x6a0]
test eax, eax
je 0x4bc98c
push eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov dword [ebp - 0x6a0], 0
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc9aa
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2f
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
mov edi, dword [ebp - 0x68c]
lea eax, [ebp - 0x66c]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x66c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bcaf9
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6d8]
push ecx
push 0
push str.wpsDrivePersonalRoot
push eax
call ebx
mov eax, dword [ebp - 0x6d8]
cmp eax, 1
je 0x4bca45
cmp eax, 2
jne 0x4bcae8
lea ecx, [ebp - 0x668]
call fcn.00429bc0
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4bd874
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bca8a
push edx
lea ecx, [ebp - 0x668]
call fcn.00429e50
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6d8]
push eax
push 0
push str.wpsDrivePersonalRoot
push dword [ebp - 0x66c]
call ebx
test eax, eax
jne 0x4bcae8
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bcac2
xor eax, eax
jmp 0x4bcad6
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x4bd874
cmp eax, dword [esi - 8]
jg 0x4bd874
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4bcaf9
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x66c], 0
cmp dword [esi - 0xc], 0
je 0x4bcb90
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6d4], ebx
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, 0x5c606c
mov byte [ebp - 4], 0x32
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bcb52
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bcb5e
push 5
push 0x5c606c
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x33
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x31
call fcn.004b46b0
add esp, 8
test eax, eax
jne 0x4bcc75
lea eax, [ebp - 0x644]
push eax
call fcn.00517920
add esp, 4
mov ebx, eax
mov eax, dword [ebp - 0x69c]
or eax, 1
mov byte [ebp - 4], 0x34
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
jb 0x4bcbc2
mov ebx, dword [ebx]
push ecx
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6a8], esp
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edx, dword [ebp - 0x6a8]
add eax, 0x10
mov dword [edx], eax
mov dword [ebp - 4], 0x35
test ebx, ebx
je 0x4bcc35
test ebx, 0xffff0000
jne 0x4bcc0e
movzx eax, bx
mov ecx, edx
push eax
call fcn.00429d30
jmp 0x4bcc40
mov ecx, ebx
lea eax, [ecx + 2]
mov dword [ebp - 0x660], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bcc20
sub ecx, dword [ebp - 0x660]
sar ecx, 1
jmp 0x4bcc37
xor ecx, ecx
push ecx
push ebx
mov ecx, edx
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov dword [ebp - 4], 0x36
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x34
call fcn.004b46b0
add esp, 8
test eax, eax
jne 0x4bcc75
xor bl, bl
jmp 0x4bcc77
mov bl, 1
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 4], 0x31
test al, 1
je 0x4bccd1
mov edx, dword [ebp - 0x630]
and eax, 0xfffffffe
mov dword [ebp - 0x69c], eax
cmp edx, 8
jb 0x4bccd1
mov ecx, dword [ebp - 0x644]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bccc7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bd86f
push edx
push ecx
call fcn.00558004
add esp, 8
test bl, bl
je 0x4bcdea
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, str.clear_WpsDrivePersonalRoot__userid
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bcd17
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bcd23
push 0x23
push str.clear_WpsDrivePersonalRoot__userid
call fcn.0042a000
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x38
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bcd30
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.00429970
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], ebx
mov eax, dword [ebp - 0x660]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x684], eax
call fcn.00429b20
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [ebx], eax
call fcn.0046c260
lea eax, [ebp - 0x6b4]
mov byte [ebp - 4], 0x39
push eax
push 1
push 1
push esi
mov dword [ebp - 0x6b4], 0
call fcn.0047a510
push dword [ebp - 0x6b4]
push str.779_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.H:pub_9qls_rc_bug_mas_v12_2407Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x63cbb0
call fcn.0046bb20
add esp, 0x24
lea ecx, [ebp - 0x644]
call fcn.0046c340
mov edx, dword [ebp - 0x684]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bcdea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x66c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x4bcdfd
push eax
call ebx
mov dword [ebp - 0x66c], 0
lea edx, [esi - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bce1f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3a
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
lea eax, [ebp - 0x664]
mov byte [ebp - 4], 0x3c
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov dword [ebp - 0x664], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bcf66
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0
push str.wpsDriveEnterpriseRoot
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x6b8]
cmp eax, 1
je 0x4bceb2
cmp eax, 2
jne 0x4bcf59
lea ecx, [ebp - 0x668]
call fcn.00429bc0
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4bd874
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bcef7
push edx
lea ecx, [ebp - 0x668]
call fcn.00429e50
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6b8]
push eax
push 0
push str.wpsDriveEnterpriseRoot
push dword [ebp - 0x664]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4bcf59
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bcf33
xor eax, eax
jmp 0x4bcf47
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x4bd874
cmp eax, dword [esi - 8]
jg 0x4bd874
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bcf66
push eax
call ebx
mov dword [ebp - 0x664], 0
cmp dword [esi - 0xc], 0
je 0x4bd0db
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6bc], ebx
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, 0x5c6188
mov byte [ebp - 4], 0x3d
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bcfbf
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bcfcb
push 7
push 0x5c6188
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x3e
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3c
call fcn.004b46b0
add esp, 8
test eax, eax
jne 0x4bd0d7
lea eax, [ebp - 0x644]
push eax
call fcn.00517b60
add esp, 4
mov ebx, eax
mov eax, dword [ebp - 0x69c]
or eax, 2
mov byte [ebp - 4], 0x3f
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
jb 0x4bd02f
mov ebx, dword [ebx]
push ecx
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x688], esp
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edx, dword [ebp - 0x688]
add eax, 0x10
mov dword [edx], eax
mov dword [ebp - 4], 0x40
test ebx, ebx
je 0x4bd09b
test ebx, 0xffff0000
jne 0x4bd07b
movzx eax, bx
mov ecx, edx
push eax
call fcn.00429d30
jmp 0x4bd0a6
mov ecx, ebx
lea eax, [ecx + 2]
mov dword [ebp - 0x660], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bd086
sub ecx, dword [ebp - 0x660]
sar ecx, 1
jmp 0x4bd09d
xor ecx, ecx
push ecx
push ebx
mov ecx, edx
call fcn.0042a000
push ecx
lea eax, [esi - 0x10]
mov dword [ebp - 4], 0x41
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3f
call fcn.004b46b0
add esp, 8
test eax, eax
je 0x4bd0db
mov bl, 1
jmp 0x4bd0dd
xor bl, bl
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 4], 0x3c
test al, 2
je 0x4bd137
mov edx, dword [ebp - 0x630]
and eax, 0xfffffffd
mov dword [ebp - 0x69c], eax
cmp edx, 8
jb 0x4bd137
mov ecx, dword [ebp - 0x644]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bd12d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bd86f
push edx
push ecx
call fcn.00558004
add esp, 8
test bl, bl
je 0x4bd254
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd833
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, str.clear_WpsDriveEnterpriseRoot__userid
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bd17d
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bd189
push 0x25
push str.clear_WpsDriveEnterpriseRoot__userid
call fcn.0042a000
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x43
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bd196
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.00429970
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], ebx
mov eax, dword [ebp - 0x660]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x684], eax
call fcn.00429b20
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [ebx], eax
call fcn.0046c260
lea eax, [ebp - 0x680]
mov byte [ebp - 4], 0x44
push eax
push 1
push 1
push esi
mov dword [ebp - 0x680], 0
call fcn.0047a510
push dword [ebp - 0x680]
push str.803_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.H:pub_9qls_rc_bug_mas_v12_2407Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x63cbb0
call fcn.0046bb20
add esp, 0x24
lea ecx, [ebp - 0x644]
call fcn.0046c340
mov edx, dword [ebp - 0x684]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd257
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4bd257
or ebx, 0xffffffff
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bd268
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x664], 0
lea edx, [esi - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd289
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bd2a4
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x6c8]
mov ebx, dword [ebp - 0x6a4]
mov esi, dword [ebp - 0x690]
inc ebx
mov dword [ebp - 0x6a4], ebx
cmp ebx, dword [ebp - 0x670]
jb 0x4bc2f0
test edi, edi
je 0x4bd2de
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6c4], 0
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x4bd865
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x670], eax
mov eax, str.clear_WpsDrivePath
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x670]
test eax, 0xffff0000
jne 0x4bd326
movzx eax, ax
push eax
call fcn.00429d30
jmp 0x4bd332
push 0x12
push str.clear_WpsDrivePath
call fcn.0042a000
push ecx
mov edi, esp
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x6bc], edi
mov eax, dword [ebp - 0x670]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x688], eax
call fcn.00429b20
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [edi], eax
call fcn.0046c260
lea ebx, [esi - 0x10]
mov byte [ebp - 4], 0x47
push ebx
mov dword [ebp - 0x6b4], ebx
call fcn.00429b20
add eax, 0x10
add esp, 4
mov dword [ebp - 0x6a4], eax
push 1
push 0x5b4804
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 0x48
call fcn.00429970
push 8
push str.wpsdrive
lea ecx, [ebp - 0x6a4]
call fcn.00429970
lea ecx, [ebp - 0x664]
call fcn.0042a980
mov edi, dword [ebp - 0x6a4]
lea eax, [ebp - 0x66c]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x66c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x668], 0
test eax, eax
je 0x4bd4d1
lea ecx, [ebp - 0x668]
push ecx
push 0
lea ecx, [ebp - 0x680]
push ecx
push 0
push str.driveRootPath
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x680]
cmp eax, 1
je 0x4bd438
cmp eax, 2
je 0x4bd438
mov esi, dword [ebp - 0x664]
jmp 0x4bd4be
lea ecx, [ebp - 0x664]
call fcn.00429bc0
mov ecx, dword [ebp - 0x668]
shr ecx, 1
add ecx, 1
js 0x4bd874
mov esi, dword [ebp - 0x664]
mov edx, 1
mov eax, dword [esi - 8]
sub edx, dword [esi - 4]
sub eax, ecx
or eax, edx
jge 0x4bd47d
push ecx
lea ecx, [ebp - 0x664]
call fcn.00429e50
mov esi, dword [ebp - 0x664]
lea eax, [ebp - 0x668]
push eax
push esi
lea eax, [ebp - 0x680]
push eax
push 0
push str.driveRootPath
push dword [ebp - 0x66c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4bd4be
mov eax, dword [ebp - 0x668]
xor ecx, ecx
shr eax, 1
push 0xffffffffffffffff
mov word [esi + eax*2], cx
lea ecx, [ebp - 0x664]
call fcn.004ae480
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4bd4d7
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4bd4d7
mov esi, dword [ebp - 0x664]
lea edx, [esi - 0x10]
mov dword [ebp - 0x66c], 0
cmp dword [edx + 4], 0
mov dword [ebp - 0x6b8], edx
je 0x4bd58f
push ecx
mov ecx, esp
mov dword [ebp - 0x6bc], esp
push str.WPSDrive
call fcn.00444a50
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x4b
mov ebx, esp
push eax
mov dword [ebp - 0x6d4], ebx
call fcn.00429b20
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x4a
call fcn.004b46b0
add esp, 8
test eax, eax
je 0x4bd572
lea eax, [ebp - 0x680]
mov dword [ebp - 0x680], 0
push eax
push 1
push 1
push esi
call fcn.0047a510
push dword [ebp - 0x680]
push str.829_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.H:pub_9qls_rc_bug_mas_v12_2407Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x63cbb0
call fcn.0046bb20
add esp, 0x24
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4bd583
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x6b4]
mov edx, dword [ebp - 0x6b8]
or esi, 0xffffffff
mov dword [ebp - 0x66c], 0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd5b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bd5c7
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x644]
call fcn.0046c340
mov edx, dword [ebp - 0x688]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd5ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd600
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x6c8]
mov byte [ebp - 4], 0x16
test eax, eax
je 0x4bd615
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x694]
jmp 0x4bd620
or esi, 0xffffffff
push str.config.ini
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.004297b0
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0xc
push dword [eax]
call ebx
mov edx, dword [ebp - 0x688]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd662
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._filecache
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.004297b0
push 0
push 1
push 1
push dword [eax]
mov byte [ebp - 4], 0x4c
call fcn.0047a510
mov edx, dword [ebp - 0x688]
add esp, 0x1c
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd6af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00442180
test eax, eax
je 0x4bd73c
lea eax, [ebp - 0x670]
mov ecx, 0x63cd10
push eax
call fcn.00494140
push 0x27
push str.KingsoftWPS_Cloud_Filesuserdataqing
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0x4d
call fcn.00429970
push str.config.ini
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.004297b0
add esp, 0xc
push dword [eax]
call ebx
mov edx, dword [ebp - 0x688]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd71f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x670]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd73c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bd753
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x65c]
call fcn.0042aad0
mov edx, dword [ebp - 0x6ac]
mov eax, esi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd79c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4bd79c
push dword [ebp - 0x6d0]
push 0x5b4868
push str.autologin
push str.General
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x5b72b8
push str.SOFTWAREKingsoft
push 0
call fcn.004b1690
push str.WPSCloud
push str.SOFTWAREKingsoft
push dword [ebp + 8]
call fcn.004b1690
mov edx, dword [ebp - 0x6d0]
add esp, 0x18
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd7df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6b0]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd7fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x698]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x4bd817
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00557e89
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
call fcn.00566a14
push 0x80070057
call fcn.00429b00
int3