Function at 0x4bc2d0
Capabilities:
Delete file
Get common file path
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a9315
mov eax, dword fs:[0]
push eax
sub esp, 0x6e8
mov eax, dword [0x639354]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0x208
push eax
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
lea eax, [ebp - 0x420]
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x420]
push 0
push 0x1c
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x66c], eax
lea ebx, [ebp - 0x420]
mov dword [ebp - 4], 0
shr ebx, 0x10
lea eax, [ebp - 0x420]
movzx esi, ax
test ebx, ebx
jne 0x4bc37c
push esi
lea ecx, [ebp - 0x66c]
call fcn.00429d90
jmp 0x4bc3a7
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc385
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x66c]
call fcn.0042a060
lea eax, [ebp - 0x66c]
mov dword [ebp - 4], 1
push eax
call fcn.0047fa90
add esp, 4
lea ecx, [ebp - 0x66c]
push 0xd
push str.kingsoftqing
call fcn.004299d0
push 0
push 1
push 1
push dword [ebp - 0x66c]
call fcn.0047a3e0
add esp, 0x10
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2dd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x664], eax
mov byte [ebp - 4], 2
test ebx, ebx
jne 0x4bc416
push esi
lea ecx, [ebp - 0x664]
call fcn.00429d90
jmp 0x4bc442
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc420
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x664]
call fcn.0042a060
lea eax, [ebp - 0x664]
mov byte [ebp - 4], 3
push eax
call fcn.0047fa90
add esp, 4
lea ecx, [ebp - 0x664]
push 0x12
push str.kingsoftWPS_Cloud
call fcn.004299d0
push 0
push 1
push 1
push dword [ebp - 0x664]
call fcn.0047a3e0
mov edx, dword [ebp - 0x664]
or esi, 0xffffffff
add esp, 0x10
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc49b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x66c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc4b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x20a
lea eax, [ebp - 0x62c]
push 0
push eax
call fcn.00560a80
add esp, 0xc
mov dword [ebp - 4], 4
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x698], eax
push 0x104
lea eax, [ebp - 0x62c]
mov dword [ebp - 4], 5
push eax
push 0x1a
call fcn.0047ca90
lea ecx, [ebp - 0x62c]
add esp, 0xc
lea edx, [ecx + 2]
jmp 0x4bc520
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc520
sub ecx, edx
lea eax, [ebp - 0x62c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x698]
call fcn.0042a060
lea eax, [ebp - 0x698]
push eax
call fcn.0047fa90
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
add esp, 8
mov dword [ebp - 0x6ac], eax
push 0x25
push str.Kingsoftoffice6OfficeSpace_resource
lea ecx, [ebp - 0x6ac]
mov byte [ebp - 4], 6
call fcn.004299d0
mov edi, dword [ebp - 0x6ac]
push 0
push 1
push 1
push edi
call fcn.0047a3e0
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
add esp, 0x14
mov dword [ebp - 0x670], eax
push 0x26
push str.Kingsoftoffice6OfficeSpacewpsoffice
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 7
call fcn.004299d0
mov esi, dword [ebp - 0x670]
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc5ef
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc60b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [ebp - 0x664], eax
push 0x10
push str.qingdatadefault
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 8
call fcn.004299d0
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2e7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x674], eax
mov byte [ebp - 4], 9
test ebx, ebx
jne 0x4bc678
lea eax, [ebp - 0x420]
movzx eax, ax
lea ecx, [ebp - 0x674]
push eax
call fcn.00429d90
jmp 0x4bc6a3
lea ecx, [ebp - 0x420]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bc681
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x674]
call fcn.0042a060
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 0xa
push eax
call fcn.0047fa90
add esp, 4
lea ecx, [ebp - 0x674]
push 0x1a
push str.kingsoftWPS_Cloudupdate_
call fcn.004299d0
push ecx
mov esi, esp
mov dword [ebp - 0x688], esp
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x674]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
mov dword [esi], eax
mov esi, esp
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x664]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xa
call fcn.004b2cb0
add esp, 8
lea eax, [ebp - 0x698]
lea ecx, [ebp - 0x664]
push eax
call fcn.004297a0
push 0x15
push str.kingsoftqingdefault
lea ecx, [ebp - 0x664]
call fcn.004299d0
push ecx
mov esi, esp
mov dword [ebp - 0x688], esp
mov dword [ebp - 0x6a8], esi
mov eax, dword [ebp - 0x674]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
mov dword [esi], eax
mov esi, esp
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x6a8], esi
mov edi, dword [ebp - 0x664]
add edi, 0xfffffff0
push edi
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xa
call fcn.004b2cb0
push str.upqing.exe
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x680]
push eax
call fcn.00429810
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0x14
push dword [eax]
call esi
mov edx, dword [ebp - 0x680]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc7d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.version.ini
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x680]
push eax
call fcn.00429810
add esp, 0xc
push dword [eax]
call esi
mov edx, dword [ebp - 0x680]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc80e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x698]
add eax, 0xfffffff0
push eax
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [ebp - 0x66c], eax
push 0xd
push str.kingsoftqing
lea ecx, [ebp - 0x66c]
mov byte [ebp - 4], 0xd
call fcn.004299d0
push 0
push 1
push 1
push dword [ebp - 0x66c]
call fcn.0047a3e0
add esp, 0x10
lea eax, [ebp - 0x698]
lea ecx, [ebp - 0x66c]
push eax
call fcn.004297a0
push 8
push str.qingdata
lea ecx, [ebp - 0x66c]
call fcn.004299d0
mov esi, dword [ebp - 0x66c]
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc8a3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x674]
or esi, 0xffffffff
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc8c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bc8db
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x694], eax
mov eax, str.DisableDelAccountData
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x694]
test eax, 0xffff0000
jne 0x4bc919
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bc925
push 0x15
push str.DisableDelAccountData
call fcn.0042a060
lea eax, [ebp - 0x694]
mov byte [ebp - 4], 0xf
push eax
call fcn.004b5b90
mov edx, dword [ebp - 0x694]
add esp, 4
test eax, eax
mov byte [ebp - 4], 5
mov eax, esi
sete bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc95e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x4bc9be
lea eax, [ebp - 0x668]
mov ecx, 0x641e28
push eax
call fcn.00494aa0
push 0x15
push str.Kingsoftkaccountsdk
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0x10
call fcn.004299d0
push 0
push 1
push 0
push dword [ebp - 0x668]
call fcn.0047a3e0
mov edx, dword [ebp - 0x668]
add esp, 0x10
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bc9be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x6b0]
mov ecx, 0x641e28
push eax
call fcn.00494d80
push 0x27
push str.KingsoftWPS_Cloud_Filesuserdataqing
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x11
call fcn.004299d0
push str.config.ini
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x6d0]
push eax
call fcn.00429810
add esp, 0xc
cmp dword [ebp + 8], 0
mov byte [ebp - 4], 0x12
jne 0x4be221
lea eax, [ebp - 0x6ac]
mov ecx, 0x641e28
push eax
call fcn.00494d80
push 0x22
push str.KingsoftWPS_Cloud_Filesuserdata
lea ecx, [ebp - 0x6ac]
mov byte [ebp - 4], 0x13
call fcn.004299d0
lea eax, [ebp - 0x65c]
push 1
push eax
call fcn.00519680
add esp, 8
cmp dword [ebp - 0x64c], 0
mov byte [ebp - 4], 0x14
je 0x4bca85
cmp dword [ebp - 0x648], 8
lea eax, [ebp - 0x65c]
push str.zh_CN
cmovae eax, dword [ebp - 0x65c]
push eax
call fcn.0056b422
add esp, 8
test eax, eax
je 0x4bca85
mov eax, 0x5caf7c
mov ecx, 8
jmp 0x4bca8f
mov eax, str.qing
mov ecx, 5
push ecx
push eax
lea ecx, [ebp - 0x6ac]
call fcn.004299d0
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2f1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x694], eax
mov eax, str.SOFTWAREKingsoftWPSCloud
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x694]
test eax, 0xffff0000
jne 0x4bcada
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bcae6
push 0x1a
push str.SOFTWAREKingsoftWPSCloud
call fcn.0042a060
mov byte [ebp - 4], 0x17
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2fb
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x690], esi
mov edi, dword [ebp - 0x694]
lea eax, [ebp - 0x664]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x664], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x664]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x68c], 0
test eax, eax
je 0x4bcc35
lea ecx, [ebp - 0x68c]
push ecx
push 0
lea ecx, [ebp - 0x670]
push ecx
push 0
push str.NeedUninstallQingUserData
push eax
call ebx
mov eax, dword [ebp - 0x670]
cmp eax, 1
je 0x4bcb81
cmp eax, 2
jne 0x4bcc24
lea ecx, [ebp - 0x690]
call fcn.00429c20
mov edx, dword [ebp - 0x68c]
shr edx, 1
add edx, 1
js 0x4be314
mov esi, dword [ebp - 0x690]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bcbc6
push edx
lea ecx, [ebp - 0x690]
call fcn.00429eb0
mov esi, dword [ebp - 0x690]
lea eax, [ebp - 0x68c]
push eax
push esi
lea eax, [ebp - 0x670]
push eax
push 0
push str.NeedUninstallQingUserData
push dword [ebp - 0x664]
call ebx
test eax, eax
jne 0x4bcc24
mov eax, dword [ebp - 0x68c]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bcbfe
xor eax, eax
jmp 0x4bcc12
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x4be314
cmp eax, dword [esi - 8]
jg 0x4be314
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bcc35
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x664], 0
mov ecx, 0x5bd654
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4bcc6c
test dx, dx
je 0x4bcc68
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4bcc6c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4bcc46
xor ebx, ebx
jmp 0x4bcc71
sbb ebx, ebx
or ebx, 1
mov dword [ebp - 0x664], 0
add esi, 0xfffffff0
mov byte [ebp - 4], 0x16
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4bcc97
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x4be0bd
xor eax, eax
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], eax
add edi, 0xfffffff0
mov byte [ebp - 4], 0x1b
push edi
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [ebp - 0x690], eax
push 1
push 0x5b9804
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x1c
call fcn.004299d0
push 0xa
push str.usercenter
lea ecx, [ebp - 0x690]
call fcn.004299d0
mov esi, dword [ebp - 0x690]
lea eax, [ebp - 0x670]
push eax
push 0x2001f
push 0
push esi
push 0x80000001
mov dword [ebp - 0x670], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4bcd36
mov edi, dword [ebp - 0x670]
mov dword [ebp - 0x6c8], edi
mov dword [ebp - 0x6c4], eax
jmp 0x4bcd38
xor edi, edi
mov byte [ebp - 4], 0x1c
test eax, eax
jne 0x4bdd88
push eax
push eax
push eax
push eax
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x6e0], eax
lea eax, [ebp - 0x6e0]
push eax
push 0
push 0
lea eax, [ebp - 0x670]
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor ebx, ebx
mov dword [ebp - 0x6a4], ebx
cmp dword [ebp - 0x670], ebx
jbe 0x4bdd69
jmp 0x4bcd90
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
add esp, 0xc
mov dword [ebp - 0x6e4], 0x104
lea eax, [ebp - 0x6f4]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x218]
push eax
push ebx
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x4bdd56
add esi, 0xfffffff0
push esi
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [ebp - 0x68c], eax
push 1
push 0x5b9804
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 0x1e
call fcn.004299d0
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bce10
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x68c]
call fcn.004299d0
mov byte [ebp - 4], 0x1f
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x660], esi
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 0x21
push eax
push 0x20019
push 0
push dword [ebp - 0x68c]
mov dword [ebp - 0x674], 0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x668], 0
test eax, eax
je 0x4bcf81
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x668]
push ecx
push 0
lea ecx, [ebp - 0x6cc]
push ecx
push 0
push str.cacheFileRoot
push eax
call ebx
mov eax, dword [ebp - 0x6cc]
cmp eax, 1
je 0x4bcecc
cmp eax, 2
jne 0x4bcf6f
lea ecx, [ebp - 0x660]
call fcn.00429c20
mov edx, dword [ebp - 0x668]
shr edx, 1
add edx, 1
js 0x4be314
mov esi, dword [ebp - 0x660]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bcf11
push edx
lea ecx, [ebp - 0x660]
call fcn.00429eb0
mov esi, dword [ebp - 0x660]
lea eax, [ebp - 0x668]
push eax
push esi
lea eax, [ebp - 0x6cc]
push eax
push 0
push str.cacheFileRoot
push dword [ebp - 0x674]
call ebx
test eax, eax
jne 0x4bcf6f
mov eax, dword [ebp - 0x668]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bcf49
xor eax, eax
jmp 0x4bcf5d
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x4be314
cmp eax, dword [esi - 8]
jg 0x4be314
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x674]
test eax, eax
je 0x4bcf81
push eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov dword [ebp - 0x674], 0
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x668], eax
mov eax, 0x5b9808
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x668]
test eax, 0xffff0000
jne 0x4bcfc9
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bcfd5
push 1
push 0x5b9808
call fcn.0042a060
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x23
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bcfe2
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x668]
call fcn.004299d0
cmp dword [esi - 0xc], 0
lea ebx, [esi - 0x10]
mov edi, dword [ebp - 0x668]
mov dword [ebp - 0x684], ebx
je 0x4bd078
push ecx
lea eax, [edi - 0x10]
mov dword [ebp - 0x678], esp
mov ebx, esp
push eax
mov dword [ebp - 0x67c], ebx
call fcn.00429b80
add eax, 0x10
mov dword [ebx], eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x24
mov ebx, esp
push eax
mov dword [ebp - 0x67c], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x23
call fcn.004b5140
add esp, 8
test eax, eax
je 0x4bd072
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
mov ebx, dword [ebp - 0x684]
or esi, 0xffffffff
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bd092
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x674]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x4bd0a5
push eax
call edi
mov dword [ebp - 0x674], 0
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd0c3
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x25
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
lea eax, [ebp - 0x6a0]
mov byte [ebp - 4], 0x27
push eax
push 0x20019
push 0
push dword [ebp - 0x68c]
mov dword [ebp - 0x6a0], 0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bd20d
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6dc]
push ecx
push 0
push str.syncFileRoot
push eax
call ebx
mov eax, dword [ebp - 0x6dc]
cmp eax, 1
je 0x4bd15d
cmp eax, 2
jne 0x4bd200
lea ecx, [ebp - 0x668]
call fcn.00429c20
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4be314
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bd1a2
push edx
lea ecx, [ebp - 0x668]
call fcn.00429eb0
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6dc]
push eax
push 0
push str.syncFileRoot
push dword [ebp - 0x6a0]
call ebx
test eax, eax
jne 0x4bd200
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bd1da
xor eax, eax
jmp 0x4bd1ee
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x4be314
cmp eax, dword [esi - 8]
jg 0x4be314
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x6a0]
test eax, eax
je 0x4bd20d
push eax
call edi
mov dword [ebp - 0x6a0], 0
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, 0x5cb04c
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bd255
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bd261
push 4
push 0x5cb04c
call fcn.0042a060
cmp dword [esi - 0xc], 0
lea ebx, [esi - 0x10]
mov edi, dword [ebp - 0x660]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x684], ebx
je 0x4bd400
push ecx
lea eax, [edi - 0x10]
mov dword [ebp - 0x67c], esp
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add eax, 0x10
mov dword [ebx], eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2a
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b5140
add esp, 8
test eax, eax
jne 0x4bd3eb
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6e8], ebx
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x2b
test eax, 0xffff0000
jne 0x4bd312
movzx eax, ax
mov ecx, ebx
push eax
call fcn.00429d90
jmp 0x4bd33e
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
jmp 0x4bd320
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bd320
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, ebx
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2c
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b5140
add esp, 8
test eax, eax
jne 0x4bd3eb
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6ec], ebx
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, str.WPS_Cloud_Files
mov byte [ebp - 4], 0x2d
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bd3b1
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bd3bd
push 0xf
push str.WPS_Cloud_Files
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x2e
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x29
call fcn.004b5140
add esp, 8
test eax, eax
je 0x4bd3fa
push 0
push 1
push 1
push esi
call fcn.0047a3e0
add esp, 0x10
mov ebx, dword [ebp - 0x684]
or esi, 0xffffffff
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bd41a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x6a0]
test eax, eax
je 0x4bd42c
push eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov dword [ebp - 0x6a0], 0
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd44a
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2f
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
mov edi, dword [ebp - 0x68c]
lea eax, [ebp - 0x66c]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x66c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bd599
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6d8]
push ecx
push 0
push str.wpsDrivePersonalRoot
push eax
call ebx
mov eax, dword [ebp - 0x6d8]
cmp eax, 1
je 0x4bd4e5
cmp eax, 2
jne 0x4bd588
lea ecx, [ebp - 0x668]
call fcn.00429c20
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4be314
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bd52a
push edx
lea ecx, [ebp - 0x668]
call fcn.00429eb0
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6d8]
push eax
push 0
push str.wpsDrivePersonalRoot
push dword [ebp - 0x66c]
call ebx
test eax, eax
jne 0x4bd588
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bd562
xor eax, eax
jmp 0x4bd576
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x4be314
cmp eax, dword [esi - 8]
jg 0x4be314
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4bd599
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x66c], 0
cmp dword [esi - 0xc], 0
je 0x4bd630
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6d4], ebx
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, 0x5cb0a4
mov byte [ebp - 4], 0x32
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bd5f2
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bd5fe
push 5
push 0x5cb0a4
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x33
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x31
call fcn.004b5140
add esp, 8
test eax, eax
jne 0x4bd715
lea eax, [ebp - 0x644]
push eax
call fcn.005188c0
add esp, 4
mov ebx, eax
mov eax, dword [ebp - 0x69c]
or eax, 1
mov byte [ebp - 4], 0x34
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
jb 0x4bd662
mov ebx, dword [ebx]
push ecx
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6a8], esp
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edx, dword [ebp - 0x6a8]
add eax, 0x10
mov dword [edx], eax
mov dword [ebp - 4], 0x35
test ebx, ebx
je 0x4bd6d5
test ebx, 0xffff0000
jne 0x4bd6ae
movzx eax, bx
mov ecx, edx
push eax
call fcn.00429d90
jmp 0x4bd6e0
mov ecx, ebx
lea eax, [ecx + 2]
mov dword [ebp - 0x660], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bd6c0
sub ecx, dword [ebp - 0x660]
sar ecx, 1
jmp 0x4bd6d7
xor ecx, ecx
push ecx
push ebx
mov ecx, edx
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov dword [ebp - 4], 0x36
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x34
call fcn.004b5140
add esp, 8
test eax, eax
jne 0x4bd715
xor bl, bl
jmp 0x4bd717
mov bl, 1
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 4], 0x31
test al, 1
je 0x4bd771
mov edx, dword [ebp - 0x630]
and eax, 0xfffffffe
mov dword [ebp - 0x69c], eax
cmp edx, 8
jb 0x4bd771
mov ecx, dword [ebp - 0x644]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bd767
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4be30f
push edx
push ecx
call fcn.0055c524
add esp, 8
test bl, bl
je 0x4bd88a
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, str.clear_WpsDrivePersonalRoot__userid
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bd7b7
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bd7c3
push 0x23
push str.clear_WpsDrivePersonalRoot__userid
call fcn.0042a060
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x38
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bd7d0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.004299d0
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], ebx
mov eax, dword [ebp - 0x660]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x684], eax
call fcn.00429b80
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [ebx], eax
call fcn.0046be70
lea eax, [ebp - 0x6b4]
mov byte [ebp - 4], 0x39
push eax
push 1
push 1
push esi
mov dword [ebp - 0x6b4], 0
call fcn.0047a3e0
push dword [ebp - 0x6b4]
push str.783_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.D:pub_bh8h_rc_bug_mas_v12_2409Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x641cc8
call fcn.0046b730
add esp, 0x24
lea ecx, [ebp - 0x644]
call fcn.0046bf50
mov edx, dword [ebp - 0x684]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd88a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x66c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x4bd89d
push eax
call ebx
mov dword [ebp - 0x66c], 0
lea edx, [esi - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bd8bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3a
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x668], esi
lea eax, [ebp - 0x664]
mov byte [ebp - 4], 0x3c
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov dword [ebp - 0x664], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x660], 0
test eax, eax
je 0x4bda06
lea ecx, [ebp - 0x660]
push ecx
push 0
lea ecx, [ebp - 0x6b8]
push ecx
push 0
push str.wpsDriveEnterpriseRoot
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x6b8]
cmp eax, 1
je 0x4bd952
cmp eax, 2
jne 0x4bd9f9
lea ecx, [ebp - 0x668]
call fcn.00429c20
mov edx, dword [ebp - 0x660]
shr edx, 1
add edx, 1
js 0x4be314
mov esi, dword [ebp - 0x668]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x4bd997
push edx
lea ecx, [ebp - 0x668]
call fcn.00429eb0
mov esi, dword [ebp - 0x668]
lea eax, [ebp - 0x660]
push eax
push esi
lea eax, [ebp - 0x6b8]
push eax
push 0
push str.wpsDriveEnterpriseRoot
push dword [ebp - 0x664]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4bd9f9
mov eax, dword [ebp - 0x660]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x4bd9d3
xor eax, eax
jmp 0x4bd9e7
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x4be314
cmp eax, dword [esi - 8]
jg 0x4be314
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bda06
push eax
call ebx
mov dword [ebp - 0x664], 0
cmp dword [esi - 0xc], 0
je 0x4bdb7b
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x6bc], ebx
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, 0x5cb1c0
mov byte [ebp - 4], 0x3d
mov ecx, ebx
test eax, 0xffff0000
jne 0x4bda5f
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bda6b
push 7
push 0x5cb1c0
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x3e
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3c
call fcn.004b5140
add esp, 8
test eax, eax
jne 0x4bdb77
lea eax, [ebp - 0x644]
push eax
call fcn.00518b00
add esp, 4
mov ebx, eax
mov eax, dword [ebp - 0x69c]
or eax, 2
mov byte [ebp - 4], 0x3f
cmp dword [ebx + 0x14], 8
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x684], eax
jb 0x4bdacf
mov ebx, dword [ebx]
push ecx
mov dword [ebp - 0x67c], esp
mov dword [ebp - 0x688], esp
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edx, dword [ebp - 0x688]
add eax, 0x10
mov dword [edx], eax
mov dword [ebp - 4], 0x40
test ebx, ebx
je 0x4bdb3b
test ebx, 0xffff0000
jne 0x4bdb1b
movzx eax, bx
mov ecx, edx
push eax
call fcn.00429d90
jmp 0x4bdb46
mov ecx, ebx
lea eax, [ecx + 2]
mov dword [ebp - 0x660], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bdb26
sub ecx, dword [ebp - 0x660]
sar ecx, 1
jmp 0x4bdb3d
xor ecx, ecx
push ecx
push ebx
mov ecx, edx
call fcn.0042a060
push ecx
lea eax, [esi - 0x10]
mov dword [ebp - 4], 0x41
mov ebx, esp
push eax
mov dword [ebp - 0x678], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3f
call fcn.004b5140
add esp, 8
test eax, eax
je 0x4bdb7b
mov bl, 1
jmp 0x4bdb7d
xor bl, bl
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 4], 0x3c
test al, 2
je 0x4bdbd7
mov edx, dword [ebp - 0x630]
and eax, 0xfffffffd
mov dword [ebp - 0x69c], eax
cmp edx, 8
jb 0x4bdbd7
mov ecx, dword [ebp - 0x644]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bdbcd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4be30f
push edx
push ecx
call fcn.0055c524
add esp, 8
test bl, bl
je 0x4bdcf4
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be2d3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x660], eax
mov eax, str.clear_WpsDriveEnterpriseRoot__userid
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x660]
test eax, 0xffff0000
jne 0x4bdc1d
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bdc29
push 0x25
push str.clear_WpsDriveEnterpriseRoot__userid
call fcn.0042a060
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x43
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bdc36
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.004299d0
push ecx
mov ebx, esp
mov dword [ebp - 0x67c], ebx
mov eax, dword [ebp - 0x660]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x684], eax
call fcn.00429b80
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [ebx], eax
call fcn.0046be70
lea eax, [ebp - 0x680]
mov byte [ebp - 4], 0x44
push eax
push 1
push 1
push esi
mov dword [ebp - 0x680], 0
call fcn.0047a3e0
push dword [ebp - 0x680]
push str.807_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.D:pub_bh8h_rc_bug_mas_v12_2409Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x641cc8
call fcn.0046b730
add esp, 0x24
lea ecx, [ebp - 0x644]
call fcn.0046bf50
mov edx, dword [ebp - 0x684]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bdcf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4bdcf7
or ebx, 0xffffffff
mov eax, dword [ebp - 0x664]
test eax, eax
je 0x4bdd08
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x664], 0
lea edx, [esi - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4bdd29
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4bdd44
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x6c8]
mov ebx, dword [ebp - 0x6a4]
mov esi, dword [ebp - 0x690]
inc ebx
mov dword [ebp - 0x6a4], ebx
cmp ebx, dword [ebp - 0x670]
jb 0x4bcd90
test edi, edi
je 0x4bdd7e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x6c4], 0
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4be305
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x670], eax
mov eax, str.clear_WpsDrivePath
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x670]
test eax, 0xffff0000
jne 0x4bddc6
movzx eax, ax
push eax
call fcn.00429d90
jmp 0x4bddd2
push 0x12
push str.clear_WpsDrivePath
call fcn.0042a060
push ecx
mov edi, esp
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x6bc], edi
mov eax, dword [ebp - 0x670]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x688], eax
call fcn.00429b80
add esp, 4
lea ecx, [ebp - 0x644]
add eax, 0x10
mov dword [edi], eax
call fcn.0046be70
lea ebx, [esi - 0x10]
mov byte [ebp - 4], 0x47
push ebx
mov dword [ebp - 0x6b4], ebx
call fcn.00429b80
add eax, 0x10
add esp, 4
mov dword [ebp - 0x6a4], eax
push 1
push 0x5b9804
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 0x48
call fcn.004299d0
push 8
push str.wpsdrive
lea ecx, [ebp - 0x6a4]
call fcn.004299d0
lea ecx, [ebp - 0x664]
call fcn.0042a9e0
mov edi, dword [ebp - 0x6a4]
lea eax, [ebp - 0x66c]
push eax
push 0x20019
push 0
push edi
push 0x80000001
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x66c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x668], 0
test eax, eax
je 0x4bdf71
lea ecx, [ebp - 0x668]
push ecx
push 0
lea ecx, [ebp - 0x680]
push ecx
push 0
push str.driveRootPath
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x680]
cmp eax, 1
je 0x4bded8
cmp eax, 2
je 0x4bded8
mov esi, dword [ebp - 0x664]
jmp 0x4bdf5e
lea ecx, [ebp - 0x664]
call fcn.00429c20
mov ecx, dword [ebp - 0x668]
shr ecx, 1
add ecx, 1
js 0x4be314
mov esi, dword [ebp - 0x664]
mov edx, 1
mov eax, dword [esi - 8]
sub edx, dword [esi - 4]
sub eax, ecx
or eax, edx
jge 0x4bdf1d
push ecx
lea ecx, [ebp - 0x664]
call fcn.00429eb0
mov esi, dword [ebp - 0x664]
lea eax, [ebp - 0x668]
push eax
push esi
lea eax, [ebp - 0x680]
push eax
push 0
push str.driveRootPath
push dword [ebp - 0x66c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4bdf5e
mov eax, dword [ebp - 0x668]
xor ecx, ecx
shr eax, 1
push 0xffffffffffffffff
mov word [esi + eax*2], cx
lea ecx, [ebp - 0x664]
call fcn.004aedf0
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4bdf77
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4bdf77
mov esi, dword [ebp - 0x664]
lea edx, [esi - 0x10]
mov dword [ebp - 0x66c], 0
cmp dword [edx + 4], 0
mov dword [ebp - 0x6b8], edx
je 0x4be02f
push ecx
mov ecx, esp
mov dword [ebp - 0x6bc], esp
push str.WPSDrive
call fcn.004445b0
push ecx
lea eax, [esi - 0x10]
mov byte [ebp - 4], 0x4b
mov ebx, esp
push eax
mov dword [ebp - 0x6d4], ebx
call fcn.00429b80
add esp, 4
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x4a
call fcn.004b5140
add esp, 8
test eax, eax
je 0x4be012
lea eax, [ebp - 0x680]
mov dword [ebp - 0x680], 0
push eax
push 1
push 1
push esi
call fcn.0047a3e0
push dword [ebp - 0x680]
push str.833_tkuserinfo::uninstallQing_tDeleteFolder_count:_d
push str.D:pub_bh8h_rc_bug_mas_v12_2409Coding_support_newsetup_srccommonappKUninstallkuserinfo.cpp
push str._INFO_
push 0x641cc8
call fcn.0046b730
add esp, 0x24
mov eax, dword [ebp - 0x66c]
test eax, eax
je 0x4be023
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x6b4]
mov edx, dword [ebp - 0x6b8]
or esi, 0xffffffff
mov dword [ebp - 0x66c], 0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be050
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4be067
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x644]
call fcn.0046bf50
mov edx, dword [ebp - 0x688]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be08c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x4be0a0
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x6c8]
mov byte [ebp - 4], 0x16
test eax, eax
je 0x4be0b5
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x694]
jmp 0x4be0c0
or esi, 0xffffffff
push str.config.ini
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.00429810
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 0xc
push dword [eax]
call ebx
mov edx, dword [ebp - 0x688]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be102
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._filecache
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.00429810
push 0
push 1
push 1
push dword [eax]
mov byte [ebp - 4], 0x4c
call fcn.0047a3e0
mov edx, dword [ebp - 0x688]
add esp, 0x1c
mov byte [ebp - 4], 0x16
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be14f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00441c60
test eax, eax
je 0x4be1dc
lea eax, [ebp - 0x670]
mov ecx, 0x641e28
push eax
call fcn.00494aa0
push 0x27
push str.KingsoftWPS_Cloud_Filesuserdataqing
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0x4d
call fcn.004299d0
push str.config.ini
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.00429810
add esp, 0xc
push dword [eax]
call ebx
mov edx, dword [ebp - 0x688]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be1bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x670]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be1dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4be1f3
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x65c]
call fcn.0042ab30
mov edx, dword [ebp - 0x6ac]
mov eax, esi
mov byte [ebp - 4], 0x12
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be23c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4be23c
push dword [ebp - 0x6d0]
push 0x5b9868
push str.autologin
push str.General
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x5bc24c
push str.SOFTWAREKingsoft
push 0
call fcn.004b1ff0
push str.WPSCloud
push str.SOFTWAREKingsoft
push dword [ebp + 8]
call fcn.004b1ff0
mov edx, dword [ebp - 0x6d0]
add esp, 0x18
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be27f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6b0]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4be29c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x698]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x4be2b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055c3a9
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
call fcn.0056af64
push 0x80070057
call fcn.00429b60
int3