Function at 0x4b0f80
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bd7ed
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x6218c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
movzx edx, byte [ecx + 0xc]
test edx, edx
jne 0x4b1001
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.004092e0
add esp, 8
mov dword [ebp - 4], 0
push 0x5cda5c
lea ecx, [ebp - 0x28]
call fcn.0041fbd0
lea ecx, [ebp - 0x28]
call fcn.00406a40
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00406c10
push str.screenmainwnd_jiebangbang
push str.mainwnd_xixiscreentshot
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x4b1036
push 0
push 1
push 0x7e8
mov ecx, dword [ebp - 0x108]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 0x104]
mov ecx, dword [edx]
call fcn.004b30b0
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
call fcn.004b3160
push str.jiebangbang
call fcn.00479bd0
add esp, 4
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx]
call fcn.004b3070
mov edx, dword [ebp - 0x104]
mov ecx, dword [edx]
call fcn.004b2ef0
push 0x14
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
call fcn.004b4d30
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx]
add ecx, 0x18
call fcn.00406a40
push eax
call fcn.004a65a0
add esp, 4
push 0x32
mov edx, dword [ebp - 0x104]
mov ecx, dword [edx]
call fcn.004b4d30
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
add ecx, 0x18
call fcn.00406a40
push eax
call fcn.004a6140
add esp, 4
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx]
add ecx, 0x18
call fcn.00406a40
push eax
call fcn.004095d0
add esp, 4
push 0x64
mov edx, dword [ebp - 0x104]
mov ecx, dword [edx]
call fcn.004b4d30
lea ecx, [ebp - 0x88]
call fcn.00406fc0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.00406fc0
mov byte [ebp - 4], 2
push 0
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx]
add edx, 0x30
push edx
call fcn.00409980
add esp, 0xc
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx]
add edx, 0x48
push edx
call fcn.00409980
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.00406fc0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00406d00
mov byte [ebp - 4], 4
push 0x5cdb04
lea ecx, [ebp - 0xa0]
call fcn.004061c0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xe8]
push ecx
call fcn.0049fc70
add esp, 0x14
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa0]
call fcn.00406170
lea ecx, [ebp - 0xe8]
call fcn.00406230
push eax
lea edx, [ebp - 0xd0]
push edx
call fcn.004a6820
add esp, 8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.00406230
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004a6820
add esp, 8
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0040b6c0
lea ecx, [ebp - 0x100]
call fcn.00406c10
lea edx, [ebp - 0x134]
push edx
call fcn.00536180
add esp, 4
mov byte [ebp - 4], 9
push 0x5cdb08
lea ecx, [ebp - 0xb8]
call fcn.00406cb0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.00536150
add esp, 8
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x114]
push edx
lea ecx, [ebp - 0x13c]
call fcn.00535cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x12c]
call fcn.00535e50
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb8]
call fcn.00406c10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x134]
call fcn.00535e50
push 0x5cdb08
lea eax, [ebp - 0x124]
push eax
call fcn.004b5fd0
add esp, 8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x10c], ecx
push 0x2710
mov ecx, dword [ebp - 0x10c]
call fcn.005361a0
movzx edx, al
test edx, edx
je 0x4b1319
call fcn.00536780
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x40]
call fcn.00406a40
push eax
lea ecx, [ebp - 0xd0]
call fcn.00406a40
push eax
push str.un_sta:_ls_err_desc:_ls
mov eax, dword [ebp - 0x118]
push eax
call fcn.0053cd10
add esp, 0x10
mov dword [ebp - 0x11c], eax
push str.auto___thiscall_APP::UnInstall::_lambda_6123052726f2e68d985273d2510bcdcf_::operator____void__const
push 0x7a
push str.C:dcodesDuilib_ScreenShotDuilib_ScreenShotuninstall_app.cpp
mov ecx, dword [ebp - 0x11c]
push ecx
push 0x2710
mov edx, dword [ebp - 0x10c]
push edx
call fcn.00536850
add esp, 0x18
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x124]
call fcn.00535e50
xor eax, eax
jne 0x4b127d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x13c]
call fcn.00535e50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd0]
call fcn.00406c10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe8]
call fcn.00406170
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00406c10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
call fcn.00406170
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.00406170
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00406170
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057029b
mov esp, ebp
pop ebp
ret