Function at 0x4e7cc0
Capabilities:
Delete directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 0x68], 0
push 0x5172b4
push 1
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 8]
call fcn.00404120
push eax
call fcn.004043b0
add esp, 8
mov byte [ebp - 0x35], al
lea ecx, [ebp - 0x3c]
call fcn.00402e80
movzx ecx, byte [ebp - 0x35]
test ecx, ecx
je 0x4e7d25
lea ecx, [ebp + 8]
call fcn.004032e0
sub eax, 1
push eax
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp + 8]
call fcn.004041b0
push eax
lea ecx, [ebp + 8]
call fcn.00402e60
lea ecx, [ebp - 0x40]
call fcn.00402e80
lea ecx, [ebp - 4]
call fcn.00407130
mov eax, dword [0x553ef0]
push eax
push 0x5172b8
lea ecx, [ebp - 4]
push ecx
call fcn.00406020
add esp, 0xc
lea ecx, [ebp - 0x24]
call fcn.00407130
mov edx, dword [0x553ef0]
push edx
push str._sPStyleqiyi_shortCut.dll
lea eax, [ebp - 0x24]
push eax
call fcn.00406020
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.004ac585
lea ecx, [ebp - 0x20]
call fcn.00407130
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0x517310
lea eax, [ebp - 0x20]
push eax
call fcn.00406020
add esp, 0x10
push 0
lea ecx, [ebp - 0x20]
call sym.QiyiInstaller.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ac61d
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x4e7f2c
lea ecx, [ebp - 0x1c]
call fcn.004ac3d7
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x1c]
call fcn.004ac546
test eax, eax
jne 0x4e7f27
lea ecx, [ebp - 0x1c]
call fcn.00408ba0
test eax, eax
je 0x4e7e66
lea ecx, [ebp - 0x2c]
call fcn.00407130
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004ac8db
mov edx, dword [eax]
push edx
mov eax, dword [ebp + 8]
push eax
push 0x51731c
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00406020
add esp, 0x10
lea ecx, [ebp - 0x44]
call fcn.00402e80
lea ecx, [ebp - 4]
call sym.QiyiInstaller.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403d60
test eax, eax
jne 0x4e7e2e
lea ecx, [ebp - 0x2c]
call fcn.00402e80
jmp 0x4e7da3
movzx edx, byte [ebp + 0x10]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
lea eax, [ebp + 0xc]
push eax
call fcn.00402120
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.00402120
call fcn.004e7cc0
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.00402e80
jmp 0x4e7f27
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ac8db
lea ecx, [ebp - 0x30]
call fcn.00407130
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0x517328
lea eax, [ebp - 0x30]
push eax
call fcn.00406020
add esp, 0x10
lea ecx, [ebp - 0x24]
call sym.QiyiInstaller.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x30]
call fcn.00403d60
test eax, eax
jne 0x4e7ebd
lea ecx, [ebp - 0x30]
call fcn.00402e80
lea ecx, [ebp - 0x34]
call fcn.00402e80
jmp 0x4e7da3
movzx ecx, byte [ebp + 0x10]
test ecx, ecx
je 0x4e7f00
push 0x517334
lea ecx, [ebp - 0x34]
call fcn.00403d60
test eax, eax
je 0x4e7efe
push 0x517350
lea ecx, [ebp - 0x34]
call fcn.00403d60
test eax, eax
je 0x4e7efe
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
lea edx, [ebp - 0x30]
push edx
call fcn.00402120
call sym.QiyiInstaller.exe_Delete
add esp, 4
jmp 0x4e7f17
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
lea eax, [ebp - 0x30]
push eax
call fcn.00402120
call sym.QiyiInstaller.exe_Delete
add esp, 4
lea ecx, [ebp - 0x30]
call fcn.00402e80
lea ecx, [ebp - 0x34]
call fcn.00402e80
jmp 0x4e7da3
lea ecx, [ebp - 0x1c]
call fcn.004ac2f1
lea ecx, [ebp + 8]
call sym.QiyiInstaller.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x4e7f65
or dword [ebp - 0x68], 1
lea ecx, [ebp + 8]
push ecx
push 0x51736c
lea edx, [ebp - 0x60]
push edx
call fcn.004042e0
add esp, 0xc
mov dword [ebp - 0x6c], eax
jmp 0x4e7f81
or dword [ebp - 0x68], 2
lea eax, [ebp + 8]
push eax
push 0x517398
lea ecx, [ebp - 0x64]
push ecx
call fcn.004042e0
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x5c], edx
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
mov eax, dword [ebp - 0x5c]
push eax
call fcn.00402120
mov ecx, 0x553e48
call fcn.004f2090
mov ecx, dword [ebp - 0x68]
and ecx, 2
je 0x4e7fb4
and dword [ebp - 0x68], 0xfffffffd
lea ecx, [ebp - 0x64]
call fcn.00402e80
mov edx, dword [ebp - 0x68]
and edx, 1
je 0x4e7fc8
and dword [ebp - 0x68], 0xfffffffe
lea ecx, [ebp - 0x60]
call fcn.00402e80
lea ecx, [ebp - 0x20]
call fcn.00402e80
lea ecx, [ebp - 0x1c]
call fcn.004ac5ae
lea ecx, [ebp - 0x24]
call fcn.00402e80
lea ecx, [ebp - 4]
call fcn.00402e80
lea ecx, [ebp + 8]
call fcn.00402e80
lea ecx, [ebp + 0xc]
call fcn.00402e80
mov esp, ebp
pop ebp
ret