Function at 0x40bd90
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Delete registry key
Get common file path
Get file attributes
Inspect section memory permissions
Move file
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x473122
mov eax, dword fs:[0]
push eax
sub esp, 0xe04
mov eax, dword [0x498068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x784], ebx
mov ecx, 0x1000001
mov dword [ebp - 0x788], edi
call fcn.00403ae0
lea ecx, [ebp - 0x7b8]
mov dword [ebp - 0x7b8], ebx
call fcn.00403e40
cmp dword [0x49ad2c], ebx
jg 0x40be2f
push edi
push 0x8e
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
mov dword [ebp - 4], edi
lea ecx, [eax + 8]
push dword [ebp - 0x7b8]
mov ebx, 1
mov edx, str.After_DeleteFiles::Run__:_product_info:_count
mov dword [ebp - 0x784], ebx
call fcn.00407130
mov ecx, eax
call fcn.004050f0
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40be4f
and ebx, 0xfffffffe
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 1
call fcn.00401a10
lea ecx, [ebp - 0x5d0]
call fcn.00401a30
sub esp, 0x18
mov dword [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484e68
call fcn.00404fd0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 3
call fcn.00441670
add esp, 0x18
cmp dword [0x49ad1c], 1
jne 0x40bee9
cmp dword [0x49ad2c], 3
jg 0x40bee9
test al, al
jne 0x40bee9
push 3
push 0x95
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 2
mov byte [ebp - 4], 5
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_result.
call fcn.00407130
mov dword [ebp - 4], 3
test bl, 2
je 0x40bf09
and ebx, 0xfffffffd
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x480]
call fcn.00401920
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x480]
call fcn.00426a40
push eax
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 7
call fcn.00401920
lea ecx, [ebp - 0x4e0]
call fcn.00426940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 9
call fcn.00401850
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xa
call fcn.00401850
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xb
call fcn.00401a10
lea ecx, [ebp - 0x6a8]
call fcn.00405f60
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484e8c
call fcn.00404fd0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xd
call fcn.004412c0
add esp, 0x18
cmp dword [0x49ad1c], 1
jne 0x40bffe
cmp dword [0x49ad2c], 3
jg 0x40bffe
test al, al
jne 0x40bffe
push 3
push 0x9a
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 4
mov byte [ebp - 4], 0xf
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_result.
call fcn.00407130
mov dword [ebp - 4], 0xd
test bl, 4
je 0x40c01e
and ebx, 0xfffffffb
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
push 0x484e5c
lea ecx, [ebp - 0x6a8]
call fcn.0040b0d0
test al, al
jne 0x40c095
cmp dword [0x49ad1c], 1
jne 0x40c075
cmp dword [0x49ad2c], 3
jg 0x40c075
push 3
push 0xa5
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 8
mov byte [ebp - 4], 0x10
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_false.
call fcn.00407130
mov dword [ebp - 4], 0xd
test bl, 8
je 0x40f415
lea ecx, [ebp - 0x87c]
call fcn.00425110
jmp 0x40f415
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00452050
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 0
push 0
push 0x2b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp dword [0x49ad1c], 1
jne 0x40c107
cmp dword [0x49ad2c], 3
jg 0x40c107
test eax, eax
je 0x40c107
push 3
push 0xac
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 0x10
mov byte [ebp - 4], 0x1b
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_hr__S_OK.
call fcn.00407130
mov dword [ebp - 4], 0xd
test bl, 0x10
je 0x40c127
and ebx, 0xffffffef
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
lea ecx, [ebp - 0x6d8]
call fcn.00401900
lea edx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1c
mov ecx, 0x66
call fcn.0042b6d0
push str.regsvr32.exe
lea ecx, [ebp - 0x480]
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00426760
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x20
call fcn.00401850
push str.Uninstall.xml
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x1f
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x28
call fcn.00401850
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x27
mov byte [ebp - 0x799], 0
call fcn.00401810
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call esi
cmp eax, 0xffffffff
jne 0x40c40c
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7a8], 0
push 0x20019
push str.SoftwareTencentQQ2009
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x2d
call fcn.004240f0
test eax, eax
jne 0x40c4ee
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x38
call fcn.00401a10
lea ecx, [ebp - 0x438]
call fcn.00401a30
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x3a
push eax
push str.version
lea ecx, [ebp - 0x7ac]
call fcn.00424470
test eax, eax
jne 0x40c4db
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x40c4db
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x4e
call fcn.00401a10
lea ecx, [ebp - 0x498]
call fcn.00401a30
sub esp, 0x18
mov byte [ebp - 4], 0x50
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484ea0
call fcn.00404fd0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x50
call fcn.00441670
add esp, 0x18
lea eax, [ebp - 0x498]
lea ecx, [ebp - 0x4c8]
push eax
call fcn.00401920
push str.Uninstall.xml
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x52
call fcn.004018b0
push str.Uninstall
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x53
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x528]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00426760
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x55
push ecx
lea ecx, [ebp - 0x450]
push ecx
mov ecx, eax
call fcn.00426760
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x56
push ecx
lea ecx, [ebp - 0x510]
push ecx
mov ecx, eax
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x58
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x59
call fcn.00401850
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x5b
call fcn.00401850
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x540]
call fcn.00401850
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x60
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40c4aa
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x690]
call fcn.00401c00
lea ecx, [ebp - 0x510]
mov byte [ebp - 0x799], 1
mov byte [ebp - 4], 0x52
call fcn.00401850
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x50
call fcn.00401850
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x7a
call fcn.00401850
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x7f
call fcn.00401850
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x27
call fcn.00423fd0
push 0
push 1
lea ecx, [ebp - 0xe10]
call fcn.0043e6c0
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x84
call fcn.00401810
push eax
lea ecx, [ebp - 0xe10]
call fcn.0043ea40
cmp dword [ebp - 0xde0], 0
je 0x40c502
cmp dword [0x49ad2c], 2
jg 0x40c48a
push 2
push 0xd6
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
mov byte [ebp - 4], 0x85
lea ecx, [eax + 8]
push dword [ebp - 0xde0]
or ebx, 0x20
mov edx, str.ErrorID_
mov dword [ebp - 0x784], ebx
call fcn.00407130
mov ecx, eax
call fcn.00405430
mov dword [ebp - 4], 0x84
test bl, 0x20
je 0x40f3d9
lea ecx, [ebp - 0x87c]
call fcn.00425110
jmp 0x40f3d9
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x52
call fcn.00401850
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x50
call fcn.00401850
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x66
call fcn.00401850
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x6b
call fcn.00401850
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x27
call fcn.00423fd0
jmp 0x40f3e8
push 0x484d74
lea ecx, [ebp - 0xe10]
call fcn.0040b840
mov dword [ebp - 0x7a8], eax
test eax, eax
jne 0x40c576
cmp dword [0x49ad2c], 2
jg 0x40c556
push 2
push 0xdc
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 0x40
mov byte [ebp - 4], 0x90
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.uninstall_root__NULL
call fcn.00407130
mov dword [ebp - 4], 0x84
test bl, 0x40
je 0x40f3d9
lea ecx, [ebp - 0x87c]
call fcn.00425110
jmp 0x40f3d9
push str.Version
mov ecx, eax
call fcn.0040b840
push 0
push str.versionnum
mov ecx, eax
call fcn.0043e080
mov dword [ebp - 0x78c], eax
test eax, eax
jne 0x40c5f6
cmp dword [0x49ad2c], 2
jg 0x40c5d7
push 2
push 0xe2
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 0x80
mov byte [ebp - 4], 0x9b
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.version_num_value__NULL
call fcn.00407130
mov dword [ebp - 4], 0x84
test bl, bl
jns 0x40f3d9
lea ecx, [ebp - 0x87c]
call fcn.00425110
jmp 0x40f3d9
mov byte [ebp - 4], 0xa6
mov dword [ebp - 0x7c4], 0
mov dword [ebp - 0x7c0], 0
mov dword [ebp - 0x7bc], 0
push eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xa8
call fcn.00404fd0
lea eax, [ebp - 0x7c4]
mov byte [ebp - 4], 0xa9
push eax
mov dl, 0x2e
lea ecx, [ebp - 0x480]
call fcn.0042c7b0
add esp, 4
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xaa
call fcn.00404e00
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0xa8
call fcn.0040f670
cmp eax, 2
jne 0x40c741
mov byte [ebp - 4], 0xa8
mov esi, dword [ebp - 0x7c4]
mov ecx, esi
call fcn.00404d10
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x7cc]
mov edx, dword [esi + 0x10]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa8
lea edx, [eax + edx]
call fcn.0042b140
add esp, 4
mov byte [ebp - 4], 0xa8
mov esi, dword [ebp - 0x7c4]
lea ecx, [esi + 0x18]
call fcn.00404d10
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x7c8]
mov edx, dword [esi + 0x28]
push ecx
add edx, eax
mov byte [ebp - 4], 0xa8
mov ecx, eax
call fcn.0042b140
add esp, 4
cmp dword [ebp - 0x7cc], 1
jne 0x40c6e0
cmp dword [ebp - 0x7c8], 0
je 0x40c7a4
cmp dword [0x49ad2c], 0
jg 0x40c72a
push 0
push 0xf1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
mov byte [ebp - 4], 0xbb
lea ecx, [eax + 8]
or ebx, 0x100
mov edx, str.version_num_
mov dword [ebp - 0x784], ebx
call fcn.00407130
mov edx, dword [ebp - 0x78c]
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x100
je 0x40c7a4
and ebx, 0xfffffeff
jmp 0x40c793
cmp dword [0x49ad2c], 2
jg 0x40c77e
push 2
push 0xf6
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 0x200
mov byte [ebp - 4], 0xbc
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.version_num_invalid
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x200
je 0x40c7a4
and ebx, 0xfffffdff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
mov esi, dword [ebp - 0x7a8]
mov ecx, esi
push str.Regsvr
call fcn.0040b840
test eax, eax
je 0x40d09d
push str.Moudle
mov ecx, eax
call fcn.0040b840
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40d09d
mov edi, eax
nop word [eax + eax]
push 0
push str.type
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
jne 0x40c83a
cmp dword [0x49ad2c], 3
jg 0x40c83a
test esi, esi
jne 0x40c83a
push 3
push 0x103
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
or ebx, 0x400
mov byte [ebp - 4], 0xbd
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_type.
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x400
je 0x40c860
and ebx, 0xfffffbff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40c8d0
cmp dword [0x49ad2c], 2
jg 0x40c8a1
push 2
push 0x105
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00424f80
or ebx, 0x800
mov byte [ebp - 4], 0xbe
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.type__NULL
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x800
je 0x40d07e
and ebx, 0xfffff7ff
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40d07e
mov ecx, 0x484dcc
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40c8f7
test dl, dl
je 0x40c8f3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40c8f7
add eax, 2
add ecx, 2
test dl, dl
jne 0x40c8d7
xor eax, eax
jmp 0x40c8fc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40cc0d
push eax
push str.path
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
jne 0x40c95d
cmp dword [0x49ad2c], 3
jg 0x40c95d
test esi, esi
jne 0x40c95d
push 3
push 0x10b
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00424f80
or ebx, 0x1000
mov byte [ebp - 4], 0xbf
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_path.
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x1000
je 0x40c983
and ebx, 0xffffefff
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40c9f3
cmp dword [0x49ad2c], 2
jg 0x40c9c4
push 2
push 0x10d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00424f80
or ebx, 0x2000
mov byte [ebp - 4], 0xc0
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.path__NULL
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x2000
je 0x40d07e
and ebx, 0xffffdfff
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40d07e
lea ecx, [ebp - 0x558]
call fcn.00405010
push str._intallpath_
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xc1
call fcn.00404fd0
push esi
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xc2
call fcn.00404fd0
lea edx, [ebp - 0x5d0]
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x750]
call fcn.0042d4e0
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xc4
push ecx
push eax
lea edx, [ebp - 0x540]
lea ecx, [ebp - 0x480]
call fcn.0040b9b0
add esp, 8
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x750]
call fcn.00404e00
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xc2
call fcn.00404e00
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xc1
call fcn.00404e00
lea ecx, [ebp - 0x4c8]
call fcn.00405010
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xc5
push eax
lea ecx, [ebp - 0x5e8]
call fcn.004018b0
push str._common_
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0xc6
call fcn.00404fd0
lea edx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xc7
lea ecx, [ebp - 0x768]
call fcn.0042d4e0
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xc8
push ecx
push eax
lea edx, [ebp - 0x570]
lea ecx, [ebp - 0x558]
call fcn.0040b9b0
add esp, 8
mov byte [ebp - 4], 0xc7
lea ecx, [ebp - 0x768]
call fcn.00404e00
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0xc6
call fcn.00404e00
lea ecx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xc5
call fcn.00401850
lea ecx, [ebp - 0x490]
call fcn.00403050
lea eax, [ebp - 0x600]
mov byte [ebp - 0x48f], 1
push eax
lea ecx, [ebp - 0x438]
call fcn.00428d80
mov byte [ebp - 4], 0xc9
push 0x486798
lea ecx, [ebp - 0x678]
call fcn.00404fd0
lea eax, [ebp - 0x678]
mov byte [ebp - 4], 0xca
push eax
lea ecx, [ebp - 0x438]
call fcn.00429940
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0xc9
call fcn.00404e00
push 0x48679c
lea ecx, [ebp - 0x660]
call fcn.00404fd0
lea eax, [ebp - 0x660]
mov byte [ebp - 4], 0xcb
push eax
lea ecx, [ebp - 0x438]
call fcn.00429940
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0xc9
call fcn.00404e00
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x438]
call fcn.00429940
lea eax, [ebp - 0x78c]
mov dword [ebp - 0x78c], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x438]
call fcn.00423bf0
add esp, 4
mov byte [ebp - 4], 0xc5
lea ecx, [ebp - 0x438]
call fcn.00428e00
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xc1
call fcn.00404e00
lea ecx, [ebp - 0x558]
jmp 0x40d075
mov eax, 0x484e24
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40cc32
test cl, cl
je 0x40cc2e
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40cc32
add esi, 2
add eax, 2
test cl, cl
jne 0x40cc12
xor eax, eax
jmp 0x40cc37
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40d07e
push eax
push str.path
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
jne 0x40cc9e
cmp dword [0x49ad2c], 3
jg 0x40cc9e
test esi, esi
jne 0x40cc9e
push 3
push 0x125
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00424f80
mov byte [ebp - 4], 0xcc
or ebx, 0x4000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_path.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x4000
je 0x40ccc4
and ebx, 0xffffbfff
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40cd3a
cmp dword [0x49ad2c], 2
jg 0x40cd0b
push 2
push 0x127
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00424f80
mov byte [ebp - 4], 0xcd
or ebx, 0x8000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.path__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x8000
je 0x40d07e
and ebx, 0xffff7fff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40d07e
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40cd40
sub ecx, edx
lea eax, [ecx - 0xd]
add eax, esi
push eax
push str.qqprotect.exe
call fcn.00459628
add esp, 8
test eax, eax
je 0x40d07e
lea ecx, [ebp - 0x4f8]
call fcn.00405010
push str._intallpath_
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0xce
call fcn.00404fd0
push esi
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0xcf
call fcn.00404fd0
lea edx, [ebp - 0x5d0]
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x780]
call fcn.0042d4e0
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xd1
push ecx
push eax
lea edx, [ebp - 0x618]
lea ecx, [ebp - 0x648]
call fcn.0040b9b0
add esp, 8
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x780]
call fcn.00404e00
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0xcf
call fcn.00404e00
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0xce
call fcn.00404e00
lea ecx, [ebp - 0x510]
call fcn.00405010
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xd2
push eax
lea ecx, [ebp - 0x528]
call fcn.004018b0
push str._common_
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0xd3
call fcn.00404fd0
lea edx, [ebp - 0x528]
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x738]
call fcn.0042d4e0
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xd5
push ecx
push eax
lea edx, [ebp - 0x588]
lea ecx, [ebp - 0x4f8]
call fcn.0040b9b0
add esp, 8
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x738]
call fcn.00404e00
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0xd3
call fcn.00404e00
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0xd2
call fcn.00401850
push 0
push str.uninstall_arg
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
jne 0x40ceec
cmp dword [0x49ad2c], 3
jg 0x40ceec
test esi, esi
jne 0x40ceec
push 3
push 0x137
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00424f80
mov byte [ebp - 4], 0xd6
or ebx, 0x10000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_arg.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xd2
test ebx, 0x10000
je 0x40cf12
and ebx, 0xfffeffff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40cf88
cmp dword [0x49ad2c], 2
jg 0x40cf59
push 2
push 0x139
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov byte [ebp - 4], 0xd7
or ebx, 0x20000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.arg__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xd2
test ebx, 0x20000
je 0x40d060
and ebx, 0xfffdffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40d060
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x7b4]
call fcn.0040b820
lea edx, [ebp - 0x7b4]
lea ecx, [ebp - 0x468]
call fcn.0042d600
push eax
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xd8
call fcn.00426240
push eax
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0xd9
call fcn.00428d80
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xdb
call fcn.00426260
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xdc
call fcn.00401850
push esi
lea ecx, [ebp - 0x450]
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xdd
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xdc
call fcn.00404e00
lea ecx, [ebp - 0x4a8]
call fcn.00403050
lea eax, [ebp - 0x794]
mov byte [ebp - 0x4a7], 1
push eax
lea edx, [ebp - 0x4a8]
mov dword [ebp - 0x794], 0
lea ecx, [ebp - 0x5b8]
call fcn.00423bf0
add esp, 4
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x5b8]
call fcn.00428e00
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xce
call fcn.00404e00
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xa8
call fcn.00404e00
push 0
mov ecx, edi
call fcn.0040b8d0
mov edi, eax
test edi, edi
jne 0x40c7e0
mov edi, dword [ebp - 0x788]
mov esi, dword [ebp - 0x7a8]
call fcn.00407d10
test eax, eax
je 0x40d779
lea ecx, [ebp - 0x4c8]
call fcn.00426230
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xde
call fcn.00426230
push str.BinQQShellExt.dll
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xdf
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe0
push eax
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe2
call fcn.00401850
push str.BinQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe3
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe5
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00427830
test al, al
je 0x40d162
lea ecx, [ebp - 0x438]
call fcn.00427830
test al, al
jne 0x40d23e
push str.ShellExtQQShellExt.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe6
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
push eax
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0xe7
call fcn.00426270
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xe6
call fcn.00426260
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe5
call fcn.00401850
push str.ShellExtQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe8
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xe9
call fcn.00426270
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xe8
call fcn.00426260
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe5
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00427830
test al, al
je 0x40d6d1
lea ecx, [ebp - 0x438]
call fcn.00427830
test al, al
je 0x40d6d1
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x558]
call fcn.00426270
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00426270
lea ecx, [ebp - 0x490]
call fcn.00403050
lea eax, [ebp - 0x600]
mov word [ebp - 0x490], 0x101
push eax
lea ecx, [ebp - 0x510]
call fcn.00428d80
push 0x486798
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xea
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xeb
push eax
lea ecx, [ebp - 0x510]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xea
call fcn.00404e00
push 0x48679c
lea ecx, [ebp - 0x450]
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xec
push eax
lea ecx, [ebp - 0x510]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xea
call fcn.00404e00
lea eax, [ebp - 0x558]
push eax
lea ecx, [ebp - 0x510]
call fcn.00429a80
lea eax, [ebp - 0x78c]
mov dword [ebp - 0x78c], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x510]
call fcn.00423bf0
add esp, 4
call fcn.00424720
mov ecx, eax
call fcn.00403030
cmp eax, 1
jne 0x40d408
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00428d80
push 0x486798
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xee
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.00404e00
push 0x48679c
lea ecx, [ebp - 0x450]
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xef
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.00404e00
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429a80
lea eax, [ebp - 0x794]
mov dword [ebp - 0x794], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x4f8]
call fcn.00423bf0
add esp, 4
mov byte [ebp - 4], 0xea
lea ecx, [ebp - 0x4f8]
call fcn.00428e00
lea ecx, [ebp - 0x5b8]
call fcn.00401900
sub esp, 0x18
mov byte [ebp - 4], 0xf0
mov ecx, esp
mov dword [ebp - 0x794], esp
push 0x484e7c
call fcn.00404fd0
mov byte [ebp - 4], 0xf1
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0xf0
call fcn.00441670
add esp, 0x18
lea ecx, [ebp - 0x5b8]
call fcn.00404c40
test al, al
jne 0x40d6b1
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00426240
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xf2
push ecx
mov ecx, eax
call fcn.00426a40
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xf3
push ecx
mov ecx, eax
call fcn.00426920
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xf5
call fcn.00426260
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xf6
call fcn.00426260
push str.ShellExtQQShellExt.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xf7
push eax
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x480]
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xf9
call fcn.00401850
push str.ShellExtQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xfa
push eax
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x480]
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xfc
call fcn.00401850
lea ecx, [ebp - 0x540]
call fcn.00427830
test al, al
je 0x40d684
lea ecx, [ebp - 0x570]
call fcn.00427830
test al, al
je 0x40d684
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00428d80
push 0x486798
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xfd
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xfe
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xfd
call fcn.00404e00
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00429a80
lea eax, [ebp - 0x794]
mov dword [ebp - 0x794], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x5e8]
call fcn.00423bf0
add esp, 4
call fcn.00424720
mov ecx, eax
call fcn.00403030
cmp eax, 1
jne 0x40d675
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00428d80
push 0x486798
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xff
call fcn.00404fd0
lea eax, [ebp - 0x450]
mov dword [ebp - 4], 0x100
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429940
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], 0xff
call fcn.00404e00
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429a80
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x7a4], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x4f8]
call fcn.00423bf0
add esp, 4
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x4f8]
call fcn.00428e00
lea ecx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xfc
call fcn.00428e00
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0xf9
call fcn.00426260
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xf6
call fcn.00426260
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xf0
call fcn.00426260
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0xea
call fcn.00401850
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xe5
call fcn.00428e00
jmp 0x40d73d
cmp dword [0x49ad2c], 2
jg 0x40d717
push 2
push 0x1a1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov dword [ebp - 4], 0x101
or ebx, 0x40000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.qq_shell_path_not_exist.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xe5
test ebx, 0x40000
je 0x40d73d
and ebx, 0xfffbffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xe2
call fcn.00426260
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0xdf
call fcn.00426260
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xde
call fcn.00426260
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xa8
call fcn.00426260
push str.Registry
mov ecx, esi
call fcn.0040b840
test eax, eax
je 0x40de9e
push 0x484e10
mov ecx, eax
call fcn.0040b840
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40de9e
mov edi, eax
nop dword [eax]
push 0
push str.rootkey
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
mov dword [ebp - 0x794], esi
jne 0x40d819
cmp dword [0x49ad2c], 3
jg 0x40d819
test esi, esi
jne 0x40d819
push 3
push 0x1cf
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov dword [ebp - 4], 0x102
or ebx, 0x80000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_root_key.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x80000
je 0x40d83f
and ebx, 0xfff7ffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40d8b8
cmp dword [0x49ad2c], 2
jg 0x40d889
push 2
push 0x1d1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00424f80
mov dword [ebp - 4], 0x103
or ebx, 0x100000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.root_key__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x100000
je 0x40de85
and ebx, 0xffefffff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40de85
mov edx, dword [str.HKCR]
mov ecx, esi
call fcn.0040b950
mov esi, eax
mov dword [ebp - 0x78c], esi
cmp esi, 0xffffffff
jne 0x40d972
mov edx, dword [str.HKEY_CLASSES_ROOT]
mov ecx, dword [ebp - 0x794]
call fcn.0040b950
mov esi, eax
mov dword [ebp - 0x78c], eax
cmp esi, 0xffffffff
jne 0x40d972
cmp dword [0x49ad1c], 1
jne 0x40d943
cmp dword [0x49ad2c], 3
jg 0x40d943
push 3
push 0x1da
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00424f80
mov dword [ebp - 4], 0x104
or ebx, 0x200000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x200000
je 0x40de85
and ebx, 0xffdfffff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40de85
push 0
push str.subkey
mov ecx, edi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov dword [ebp - 0x7a4], eax
jne 0x40d9d9
cmp dword [0x49ad2c], 3
jg 0x40d9d9
test eax, eax
jne 0x40d9d9
push 3
push 0x1df
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00424f80
mov dword [ebp - 4], 0x105
or ebx, 0x400000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_sub_key.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x400000
je 0x40d9ff
and ebx, 0xffbfffff
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x784], ebx
call fcn.00425110
mov eax, dword [ebp - 0x7a4]
test eax, eax
jne 0x40da7e
cmp dword [0x49ad2c], 2
jg 0x40da4f
push 2
push 0x1e1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00424f80
mov dword [ebp - 4], 0x106
or ebx, 0x800000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.sub_key__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0xa8
test ebx, 0x800000
je 0x40de85
and ebx, 0xff7fffff
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40de85
push eax
lea ecx, [ebp - 0x4a0]
call fcn.0040b7e0
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x438]
call fcn.0042d600
lea ecx, [ebp - 0x7b4]
mov dword [ebp - 4], 0x107
call fcn.00423fc0
push 2
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 8
call fcn.00401810
push eax
push dword [esi*4 + 0x486d94]
lea ecx, [ebp - 0x7b4]
call fcn.004240f0
test eax, eax
je 0x40db7d
cmp dword [0x49ad2c], 2
jg 0x40db4e
push 2
push 0x1e9
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00424f80
mov byte [ebp - 4], 9
or ebx, 0x1000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.open_key:
mov ecx, eax
call fcn.00407130
mov edx, dword [ebp - 0x794]
mov ecx, eax
call fcn.00407130
mov edx, 0x486904
mov ecx, eax
call fcn.00407130
lea edx, [ebp - 0x438]
mov ecx, eax
call fcn.00409330
mov edx, str.failed
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], pe_nt_image_headers32
test ebx, 0x1000000
je 0x40de64
and ebx, 0xfeffffff
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40de64
push str.Value
mov ecx, edi
call fcn.0040b840
mov esi, eax
test esi, esi
je 0x40dd14
push 0
push 0x484e30
mov ecx, esi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov dword [ebp - 0x794], eax
jne 0x40dbf7
cmp dword [0x49ad2c], 3
jg 0x40dbf7
test eax, eax
jne 0x40dbf7
push 3
push 0x1fd
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00424f80
mov byte [ebp - 4], 0xa
or ebx, 0x2000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_name.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], pe_nt_image_headers32
test ebx, 0x2000000
je 0x40dc1d
and ebx, 0xfdffffff
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
mov eax, dword [ebp - 0x794]
test eax, eax
jne 0x40dc96
cmp dword [0x49ad2c], 2
jg 0x40dc6a
push 2
push 0x1ff
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00424f80
mov byte [ebp - 4], 0xb
or ebx, 0x4000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.name__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], pe_nt_image_headers32
test ebx, 0x4000000
je 0x40dd01
and ebx, 0xfbffffff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425110
jmp 0x40dd01
push eax
lea ecx, [ebp - 0x488]
call fcn.0040b7e0
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x4c8]
call fcn.0042d600
mov edx, 0x48693c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4c8]
call fcn.00407e60
test al, al
je 0x40dcdb
push 0x484954
lea ecx, [ebp - 0x4c8]
call fcn.00401820
lea ecx, [ebp - 0x4c8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x7b4]
call fcn.00424230
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 8
call fcn.00401850
push 0
mov ecx, esi
call fcn.0040b8d0
mov esi, eax
test esi, esi
jne 0x40db93
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0x7a4], 0
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x7a0], 0
call fcn.00401810
mov esi, dword [ebp - 0x78c]
push eax
push dword [esi*4 + 0x486d94]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40de64
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x794]
push eax
push 0
push 0
lea eax, [ebp - 0x7a4]
push eax
push 0
push 0
push 0
push dword [ebp - 0x7a0]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x40de64
cmp dword [ebp - 0x7a4], eax
jne 0x40de64
cmp dword [ebp - 0x794], eax
jne 0x40de64
lea ecx, [ebp - 0x438]
call fcn.00401810
push eax
push dword [esi*4 + 0x486d94]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
jne 0x40de64
push 0xffffffffffffffff
push 0x5c
lea ecx, [ebp - 0x438]
call fcn.0040f720
push eax
push 0
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x438]
call fcn.0040f6c0
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xd
call fcn.0040f760
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 8
call fcn.00401850
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0x7a4], 0
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x7a0], 0
call fcn.00401810
push eax
push dword [esi*4 + 0x486d94]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x40dd67
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 7
call fcn.00423fd0
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 0xa8
call fcn.00401850
push 0
mov ecx, edi
call fcn.0040b8d0
mov edi, eax
test edi, edi
jne 0x40d7b0
mov edi, dword [ebp - 0x788]
lea ecx, [ebp - 0x6f0]
call fcn.00405010
sub esp, 0x18
mov dword [ebp - 4], 0x10e
mov ecx, esp
mov dword [ebp - 0x78c], esp
push str.UninstallFrom
call fcn.00404fd0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 0xe
call fcn.004412c0
add esp, 0x18
lea ecx, [ebp - 0x6f0]
mov edx, str.SetupExe
call fcn.0040fb20
test al, al
je 0x40df38
lea ecx, [ebp - 0x7b4]
call fcn.00423fc0
push 2
push 0x486940
push closesocket
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 0x10
call fcn.004240f0
test eax, eax
jne 0x40df29
push str.QQ2009
lea ecx, [ebp - 0x7b4]
call fcn.00424230
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 0xe
call fcn.00423fd0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452050
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
add esp, 0xc
push 1
push 0x19
push eax
push 0
call esi
test eax, eax
je 0x40e018
push 0x4869ac
lea ecx, [ebp - 0x528]
call fcn.004018b0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x468]
call fcn.00426240
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x13
push ecx
lea ecx, [ebp - 0x480]
push ecx
mov ecx, eax
call fcn.00426760
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x15
call fcn.00426260
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x16
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x17
call fcn.00401850
lea ecx, [ebp - 0x480]
call fcn.00427830
test al, al
je 0x40e009
xor dl, dl
lea ecx, [ebp - 0x480]
call fcn.0040ba30
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xe
call fcn.00426260
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452050
add esp, 0xc
lea eax, [ebp - 0x218]
push 1
push 0x1a
push eax
push 0
call esi
test eax, eax
je 0x40e13d
push 0x4869ac
lea ecx, [ebp - 0x588]
call fcn.004018b0
push str.MicrosoftInternet_ExplorerQuick_Launch
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x18
call fcn.004018b0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00426240
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x1b
push ecx
lea ecx, [ebp - 0x468]
push ecx
mov ecx, eax
call fcn.00426760
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0x1c
push ecx
lea ecx, [ebp - 0x480]
push ecx
mov ecx, eax
call fcn.00426760
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x1e
call fcn.00426260
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0x1f
call fcn.00426260
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x20
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x21
call fcn.00401850
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0x22
call fcn.00401850
lea ecx, [ebp - 0x480]
call fcn.00427830
test al, al
je 0x40e12e
xor dl, dl
lea ecx, [ebp - 0x480]
call fcn.0040ba30
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xe
call fcn.00426260
push 0
push 0
push 0x3000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push str.BinQQProtectBinQQProtect.exe
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x25
call fcn.00401850
lea ecx, [ebp - 0x708]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQProtect.exe
mov ecx, eax
call fcn.0041b040
push str.QQProtectBinQQProtect.exe
lea ecx, [ebp - 0x528]
call fcn.004018b0
lea eax, [ebp - 0x528]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x720]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x28
call fcn.00401850
lea ecx, [ebp - 0x720]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQProtect
mov ecx, eax
call fcn.0041b040
push str.BinQQ.exe
lea ecx, [ebp - 0x588]
call fcn.004018b0
lea eax, [ebp - 0x588]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, 0x48647c
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x29
call fcn.00426260
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0x28
call fcn.00401850
push str.Bin_auclt.exe
lea ecx, [ebp - 0x618]
call fcn.004018b0
lea eax, [ebp - 0x618]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQUpdate
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2b
call fcn.00426260
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0x28
call fcn.00401850
push str.Bin_txupd.exe
lea ecx, [ebp - 0x648]
call fcn.004018b0
lea eax, [ebp - 0x648]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQUpdate2011
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2d
call fcn.00426260
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x28
call fcn.00401850
push str.BinSetupExSetupEx.exe
lea ecx, [ebp - 0x660]
call fcn.004018b0
lea eax, [ebp - 0x660]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.SetupEX
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2f
call fcn.00426260
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0x28
call fcn.00401850
push str.BinmaLauncher.exe
lea ecx, [ebp - 0x678]
call fcn.004018b0
lea eax, [ebp - 0x678]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.maLauncher
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x31
call fcn.00426260
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0x28
call fcn.00401850
push str.BinmaUpdat.exe
lea ecx, [ebp - 0x480]
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.maUpdat
mov ecx, eax
call fcn.0041b040
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x33
call fcn.00426260
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x28
call fcn.00401850
lea ecx, [ebp - 0x630]
call fcn.00426230
lea edx, [ebp - 0x630]
mov byte [ebp - 4], 0x35
mov ecx, 0x6c
call fcn.0042b6d0
push str.TencentQQ_rdo.cache
lea ecx, [ebp - 0x540]
call fcn.004018b0
lea eax, [ebp - 0x540]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00426760
xor dl, dl
mov byte [ebp - 4], 0x37
mov ecx, eax
call fcn.0040ba30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x36
call fcn.00426260
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x35
call fcn.00401850
push str.TencentQQloginrdo.cache
lea ecx, [ebp - 0x570]
call fcn.004018b0
lea eax, [ebp - 0x570]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00426760
xor dl, dl
mov byte [ebp - 4], 0x39
mov ecx, eax
call fcn.0040ba30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x38
call fcn.00426260
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0x35
call fcn.00401850
push str.TencentBinurdo.cache
lea ecx, [ebp - 0x4c8]
call fcn.004018b0
lea eax, [ebp - 0x4c8]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00426760
xor dl, dl
mov byte [ebp - 4], 0x3b
mov ecx, eax
call fcn.0040ba30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x3a
call fcn.00426260
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x35
call fcn.00401850
push str.PluginCom.Tencent.AudioVideo_binYAMADCodec.dll
lea ecx, [ebp - 0x558]
call fcn.004018b0
lea eax, [ebp - 0x558]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00426760
xor dl, dl
mov byte [ebp - 4], 0x3d
mov ecx, eax
call fcn.0040ba30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x3c
call fcn.00426260
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0x35
call fcn.00401850
lea ecx, [ebp - 0x5a0]
call fcn.00426230
lea edx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x4e0]
call fcn.0041c4d0
test al, al
je 0x40e781
lea ecx, [ebp - 0x5a0]
call fcn.00427a80
test al, al
je 0x40e684
sub esp, 0x18
lea ecx, [ebp - 0x5a0]
mov esi, esp
mov dword [ebp - 0x78c], esp
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
mov ecx, esi
call fcn.004018b0
sub esp, 0x18
mov byte [ebp - 4], 0x3f
mov ecx, esp
mov dword [ebp - 0x794], esp
push str.DeleteFileTempPath
call fcn.00404fd0
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x3e
call fcn.00441450
add esp, 0x30
jmp 0x40e886
cmp dword [0x49ad2c], 1
jg 0x40e6f1
push 1
push 0x2cc
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x5a0]
or ebx, 0x8000000
mov dword [ebp - 0x784], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.Create_remove_file_temp_directory
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov edi, dword [ebp - 0x788]
mov dword [ebp - 4], 0x13e
test ebx, 0x8000000
je 0x40e717
and ebx, 0xf7ffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
cmp dword [0x49ad1c], 1
jne 0x40e763
cmp dword [0x49ad2c], 3
jg 0x40e763
push 3
push 0x2cd
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov byte [ebp - 4], 0x42
or ebx, 0x10000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x13e
test ebx, 0x10000000
je 0x40e886
and ebx, 0xefffffff
jmp 0x40e875
cmp dword [0x49ad2c], 1
jg 0x40e7ee
push 1
push 0x2d2
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x5a0]
or ebx, 0x20000000
mov dword [ebp - 0x784], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.Get_remove_file_temp_directory
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov edi, dword [ebp - 0x788]
mov dword [ebp - 4], 0x13e
test ebx, 0x20000000
je 0x40e814
and ebx, 0xdfffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
cmp dword [0x49ad1c], 1
jne 0x40e860
cmp dword [0x49ad2c], 3
jg 0x40e860
push 3
push 0x2d3
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov byte [ebp - 4], 0x44
or ebx, 0x40000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x13e
test ebx, 0x40000000
je 0x40e886
and ebx, 0xbfffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
mov ecx, dword [ebp - 0x7a8]
push str.Files
call fcn.0040b840
mov dword [ebp - 0x7a8], eax
test eax, eax
je 0x40f366
push str.File
mov ecx, eax
call fcn.0040b840
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40ee4e
nop
push 0
push str.path
mov ecx, eax
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov esi, eax
jne 0x40e920
cmp dword [0x49ad2c], 3
jg 0x40e920
test esi, esi
jne 0x40e920
push 3
push 0x2f0
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov byte [ebp - 4], 0x45
or ebx, 0x80000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403040
mov edx, str.Check_failed:_path_name.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x13e
test ebx, ebx
jns 0x40e942
and ebx, 0x7fffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425110
test esi, esi
jne 0x40e9b4
cmp dword [0x49ad2c], 2
jg 0x40e986
push 2
push 0x2f3
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00424f80
mov byte [ebp - 4], 0x46
or edi, 1
mov ecx, eax
mov dword [ebp - 0x788], edi
call fcn.00403040
mov edx, str.path_name__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x13e
mov eax, dword [ebp - 0x788]
test al, 1
je 0x40ee2a
and eax, 0xfffffffe
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], eax
call fcn.00425110
jmp 0x40ee2a
push esi
lea ecx, [ebp - 0x488]
call fcn.0040b7e0
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x468]
call fcn.0042d600
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x47
call fcn.00426240
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x49
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00426230
lea eax, [ebp - 0x78d]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x4b0]
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0x438]
call fcn.0041bb20
add esp, 8
test al, al
je 0x40ee0c
cmp byte [ebp - 0x78d], 0
je 0x40ebb1
cmp dword [0x49ad2c], 1
jg 0x40ea94
push 1
push 0x2fe
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x788]
or eax, 2
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.exist_dir_to_delete_a_file_:
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp - 0x788]
test al, 2
je 0x40eab9
and eax, 0xfffffffd
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x788], eax
call fcn.00425110
lea ecx, [ebp - 0x4b0]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x40ee0c
cmp dword [0x49ad2c], 1
jg 0x40eb83
push 1
push 0x301
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 4
mov dword [ebp - 0x788], eax
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.rename
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._to
mov ecx, eax
call fcn.00407130
mov edx, ebx
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov ebx, dword [ebp - 0x784]
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp - 0x788]
test al, 4
je 0x40ee0c
and eax, 0xfffffffb
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x788], eax
call fcn.00425110
jmp 0x40ee0c
lea ecx, [ebp - 0x4b0]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x40ec9b
xor dl, dl
lea ecx, [ebp - 0x4b0]
call fcn.0040ba30
test al, al
jne 0x40ee0c
cmp dword [0x49ad2c], 1
jg 0x40ec6b
push 1
push 0x30a
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 8
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.delete_file:
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00425a00
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp - 0x788]
test al, 8
je 0x40ec90
and eax, 0xfffffff7
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x788], eax
call fcn.00425110
lea ecx, [ebp - 0x4b0]
jmp 0x40ee07
cmp dword [0x49ad2c], 1
jg 0x40ed31
push 1
push 0x310
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 0x10
mov dword [ebp - 0x788], eax
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.rename
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._to
mov ecx, eax
call fcn.00407130
mov edx, ebx
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov ebx, dword [ebp - 0x784]
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp - 0x788]
test al, 0x10
je 0x40ed56
and eax, 0xffffffef
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x788], eax
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x438]
call fcn.0040ba30
test al, al
jne 0x40ee0c
cmp dword [0x49ad2c], 1
jg 0x40eddc
push 1
push 0x315
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x788]
or eax, 0x20
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.delete_file:
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00425a00
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp - 0x788]
test al, 0x20
je 0x40ee01
and eax, 0xffffffdf
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x788], eax
call fcn.00425110
lea ecx, [ebp - 0x438]
call fcn.004277c0
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x49
call fcn.00426260
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x3e
call fcn.00426260
mov ecx, dword [ebp - 0x78c]
push str.File
call fcn.0040b8d0
mov edi, dword [ebp - 0x788]
mov dword [ebp - 0x78c], eax
test eax, eax
jne 0x40e8c0
lea ecx, [ebp - 0x798]
call fcn.0040f640
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x7a8]
push 0x484da0
call fcn.0040b840
mov ebx, dword [ebp - 0x788]
mov esi, eax
test esi, esi
je 0x40efba
nop dword [eax]
push 0
push str.path
mov ecx, esi
call fcn.0043e080
cmp dword [0x49ad1c], 1
mov edi, eax
jne 0x40eedd
cmp dword [0x49ad2c], 3
jg 0x40eedd
test edi, edi
jne 0x40eedd
push 3
push 0x32c
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov byte [ebp - 4], 0x51
or ebx, 0x40
mov ecx, eax
mov dword [ebp - 0x788], ebx
call fcn.00403040
mov edx, str.Check_failed:_path_name.
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x150
test bl, 0x40
je 0x40eefd
and ebx, 0xffffffbf
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x788], ebx
call fcn.00425110
test edi, edi
jne 0x40ef68
cmp dword [0x49ad2c], 2
jg 0x40ef44
push 2
push 0x32f
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00424f80
mov byte [ebp - 4], 0x52
or ebx, 0x80
mov ecx, eax
mov dword [ebp - 0x788], ebx
call fcn.00403040
mov edx, str.path_name__NULL
mov ecx, eax
call fcn.00407130
mov dword [ebp - 4], 0x150
test bl, bl
jns 0x40efa4
and ebx, 0xffffff7f
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], ebx
call fcn.00425110
jmp 0x40efa4
push edi
lea ecx, [ebp - 0x488]
call fcn.0040b7e0
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x468]
call fcn.0042d600
push eax
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0x53
call fcn.0040f5f0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x50
call fcn.00401850
push 0x484da0
mov ecx, esi
call fcn.0040b8d0
mov esi, eax
test esi, esi
jne 0x40ee80
mov byte [ebp - 0x78c], 0
lea ecx, [ebp - 0x798]
push dword [ebp - 0x78c]
call fcn.0040fb60
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040f540
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040f530
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040f4e0
test al, al
je 0x40f357
nop word [eax + eax]
lea ecx, [ebp - 0x7a0]
call fcn.0040f520
push eax
lea ecx, [ebp - 0x438]
call fcn.00426240
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x54
call fcn.00426230
lea eax, [ebp - 0x78d]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x498]
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0x438]
call fcn.0041bb20
add esp, 8
test al, al
je 0x40f2ff
cmp byte [ebp - 0x78d], 0
je 0x40f191
lea ecx, [ebp - 0x438]
call fcn.0042d920
test al, al
je 0x40f2ff
lea ecx, [ebp - 0x498]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x40f0c6
xor dl, dl
lea ecx, [ebp - 0x498]
call fcn.0040ba30
jmp 0x40f2ff
cmp dword [0x49ad2c], 1
jg 0x40f159
push 1
push 0x34d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x498]
or ebx, 0x100
mov dword [ebp - 0x788], ebx
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.rename
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._to
mov ecx, eax
call fcn.00407130
mov edx, ebx
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov ebx, dword [ebp - 0x788]
mov dword [ebp - 4], 0x155
test ebx, 0x100
je 0x40f17f
and ebx, 0xfffffeff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x788], ebx
call fcn.00425110
xor dl, dl
lea ecx, [ebp - 0x438]
call fcn.0040ba30
jmp 0x40f2ff
cmp dword [0x49ad2c], 1
jg 0x40f1ec
push 1
push 0x355
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x438]
or ebx, 0x200
mov dword [ebp - 0x788], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.exist_file_to_delete_a_dir_:
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov dword [ebp - 4], 0x155
test ebx, 0x200
je 0x40f212
and ebx, 0xfffffdff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], ebx
call fcn.00425110
lea ecx, [ebp - 0x498]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x40f2ff
cmp dword [0x49ad2c], 1
jg 0x40f2d9
push 1
push 0x358
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00424f80
mov edi, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x498]
or ebx, 0x400
mov dword [ebp - 0x788], ebx
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403040
mov edx, str.rename
mov ecx, eax
call fcn.00407130
mov edx, esi
mov ecx, eax
call fcn.00409330
mov edx, str._to
mov ecx, eax
call fcn.00407130
mov edx, ebx
mov ecx, eax
call fcn.00409330
mov edx, str._failed.
mov ecx, eax
call fcn.00407130
mov ebx, dword [ebp - 0x788]
mov dword [ebp - 4], 0x155
test ebx, 0x400
je 0x40f2ff
and ebx, 0xfffffbff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x788], ebx
call fcn.00425110
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x54
call fcn.00426260
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x50
call fcn.00426260
push 0
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040f500
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040f530
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040f4e0
test al, al
jne 0x40f010
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0x3e
call fcn.0040f550
cmp byte [ebp - 0x799], 0
jne 0x40f37c
xor dl, dl
lea ecx, [ebp - 0x690]
call fcn.0040ba30
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x35
call fcn.00426260
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 0x28
call fcn.00426260
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x25
call fcn.00426260
lea ecx, [ebp - 0x708]
mov byte [ebp - 4], 0xe
call fcn.00426260
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 4], 0xa8
call fcn.00404e00
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0x84
call fcn.0040f690
lea ecx, [ebp - 0xe10]
mov byte [ebp - 4], 0x27
call fcn.0043e940
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x1f
call fcn.00426260
lea ecx, [ebp - 0x600]
mov byte [ebp - 4], 0x1c
call fcn.00426260
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0xd
call fcn.00426260
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xa
call fcn.00404e00
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 3
call fcn.00426260
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00401850
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044f786
mov esp, ebp
pop ebp
ret 4