Function at 0x410d10
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3b30
mov eax, dword fs:[0]
push eax
sub esp, 0x4bc
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, eax
shr edx, 1
and dl, 1
mov byte [ebp - 0x47e], dl
mov edx, eax
shr edx, 3
and dl, 1
mov byte [ebp - 0x480], dl
mov edx, eax
shr edx, 0xb
and dl, 1
mov dword [ebp - 0x494], ecx
mov byte [ebp - 0x47f], dl
mov ecx, eax
mov edx, eax
mov bl, al
shr ecx, 2
shr edx, 0xc
shr eax, 0x12
and bl, 1
and cl, 1
and dl, 1
and al, 1
xor edi, edi
mov dword [ebp - 0x4a8], 0x80004005
mov byte [ebp - 0x489], bl
mov byte [ebp - 0x482], cl
mov byte [ebp - 0x481], dl
mov byte [ebp - 0x47d], al
test bl, bl
jne 0x410dd5
test cl, cl
jne 0x410dd5
cmp byte [ebp - 0x47e], 0
jne 0x410dd5
cmp byte [ebp - 0x480], 0
jne 0x410dd5
cmp byte [ebp - 0x47f], 0
jne 0x410dd5
test dl, dl
je 0x410e4a
call dword [sym.imp.ksolite.dll_bool___cdecl_krt::product::isEnterprise_void_]
test al, al
jne 0x410e1e
mov byte [ebp - 0x47d], 1
call fcn.0047e340
test al, al
jne 0x410e17
xor bl, bl
mov byte [ebp - 0x481], al
mov byte [ebp - 0x47f], al
mov byte [ebp - 0x480], al
mov byte [ebp - 0x47e], al
mov byte [ebp - 0x482], al
mov byte [ebp - 0x489], bl
jmp 0x410e57
mov byte [ebp - 0x47d], 0
test bl, bl
jne 0x410e57
cmp byte [ebp - 0x482], bl
jne 0x410e57
cmp byte [ebp - 0x480], bl
jne 0x410e57
cmp byte [ebp - 0x47e], bl
jne 0x410e57
cmp byte [ebp - 0x47f], bl
jne 0x410e57
cmp byte [ebp - 0x481], bl
jne 0x410e57
cmp byte [ebp - 0x47d], 0
je 0x411762
push 0x206
lea ecx, [ebp - 0x216]
xor eax, eax
push edi
push ecx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x218]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x410e95
mov eax, 0x80004005
jmp 0x411768
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x410ea0
mov ecx, dword [ebp - 0x494]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
push eax
add ecx, 0x30
call fcn.00405660
xor esi, esi
test bl, bl
je 0x410ed0
mov esi, 1
cmp byte [ebp - 0x482], 0
je 0x410edc
or esi, 4
cmp byte [ebp - 0x47e], 0
je 0x410ee8
or esi, 2
cmp byte [ebp - 0x480], 0
je 0x410ef4
or esi, 8
mov bl, byte [ebp - 0x47f]
test bl, bl
je 0x410f04
or esi, 0x800
cmp byte [ebp - 0x47d], 0
je 0x410f13
or esi, 0x40000
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
xor edx, edx
lea eax, [ebp - 0x218]
mov word [ebp - 0x47c], dx
mov dword [ebp - 0x468], 7
mov dword [ebp - 0x46c], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x410f42
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x47c]
call fcn.00405660
mov ecx, dword [ebp - 0x494]
push esi
push str.Kingsoft
push str.temp
mov dword [ebp - 4], edi
call fcn.0040e020
mov esi, dword [ebp - 0x494]
test bl, bl
je 0x410f9d
push 0x4c8ac0
push str.Kingsoft
push str.temp
mov ecx, esi
call fcn.0040e6a0
cmp byte [ebp - 0x481], 0
je 0x410fbc
push str.wpslauncher
push str.Kingsoft
push str.temp
mov ecx, esi
call fcn.0040e6a0
cmp byte [ebp - 0x47d], 0
je 0x410fdb
push str.prometheus
push str.Kingsoft
push str.temp
mov ecx, esi
call fcn.0040e6a0
push 9
push 0x4c8cf4
lea ecx, [ebp - 0x47c]
call fcn.00409380
mov dword [ebp - 0x4a4], edi
mov dword [ebp - 0x4a0], edi
mov dword [ebp - 0x49c], edi
mov byte [ebp - 4], 1
mov dword [ebp - 0x488], edi
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x41103f
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x41103f
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x411041
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x489]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 2
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 3
call fcn.00410c30
mov ebx, 8
cmp dword [ebp - 0x430], ebx
jb 0x41109c
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], ebx
jb 0x4110d0
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebp - 0x488], 2
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x411110
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x411110
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x411112
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x482]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 4
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 5
call fcn.00410c30
cmp dword [ebp - 0x430], ebx
jb 0x411168
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], ebx
jb 0x41119c
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebp - 0x488], 1
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x4111dc
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x4111dc
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x4111de
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x47e]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 6
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 7
call fcn.00410c30
cmp dword [ebp - 0x430], ebx
jb 0x411234
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], ebx
jb 0x411268
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebp - 0x488], 3
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x4112a8
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x4112a8
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x4112aa
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x480]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 8
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 9
call fcn.00410c30
cmp dword [ebp - 0x430], ebx
jb 0x411300
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], ebx
jb 0x411334
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ebx, 0xb
mov dword [ebp - 0x488], ebx
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x411375
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x411375
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x411377
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x47f]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0xa
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], bl
call fcn.00410c30
mov esi, 8
cmp dword [ebp - 0x430], esi
jb 0x4113d1
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], esi
jb 0x411405
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ebx, 0xc
mov dword [ebp - 0x488], ebx
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x411446
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x411446
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x411448
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x481]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], bl
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0xd
call fcn.00410c30
mov esi, 8
cmp dword [ebp - 0x430], esi
jb 0x4114a2
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], esi
jb 0x4114d6
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov dword [ebp - 0x488], 0x12
call fcn.0040cc40
lea ecx, [ebp - 0x488]
push ecx
mov esi, eax
lea edx, [ebp - 0x490]
push edx
lea ecx, [esi + 4]
call fcn.0048f210
mov eax, dword [eax]
cmp eax, dword [esi + 8]
je 0x411516
mov eax, dword [eax + 0x10]
cmp eax, edi
je 0x411516
lea ecx, [eax + 8]
call dword [sym.imp.QtCore4.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const]
jmp 0x411518
xor eax, eax
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x460]
push ecx
call fcn.0040ca60
lea edx, [ebp - 0x47d]
push edx
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0xe
call fcn.00410980
add esp, 0x18
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0xf
call fcn.00410c30
mov ebx, 8
cmp dword [ebp - 0x430], ebx
jb 0x411573
mov ecx, dword [ebp - 0x444]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
xor edx, edx
mov dword [ebp - 0x430], 7
mov dword [ebp - 0x434], edi
mov word [ebp - 0x444], dx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44c], ebx
jb 0x4115a7
mov eax, dword [ebp - 0x460]
push eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov esi, dword [ebp - 0x4a4]
cmp esi, dword [ebp - 0x4a0]
je 0x41161c
mov ebx, dword [ebp - 0x4a8]
jmp 0x4115c0
cmp byte [esi + 0x1c], 0
je 0x411606
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x490], esp
push 0xffffffffffffffff
push edi
xor edx, edx
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
push esi
mov word [ecx], dx
call fcn.00405560
mov ecx, dword [ebp - 0x494]
call fcn.0040b750
xor ecx, ecx
test al, al
setne cl
dec ecx
and ecx, 0x80004005
or ebx, ecx
add esi, 0x20
cmp esi, dword [ebp - 0x4a0]
jne 0x4115c0
mov dword [ebp - 0x4a8], ebx
mov ebx, 8
push 0x20a
lea eax, [ebp - 0x422]
xor edx, edx
push edi
push eax
mov word [ebp - 0x424], dx
call sub.MSVCR100.dll_memset
xor eax, eax
push edi
lea ecx, [ebp - 0x47c]
push ecx
lea edx, [ebp - 0x460]
push edx
mov dword [ebp - 0x4c8], edi
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b0], eax
mov word [ebp - 0x4ac], ax
call fcn.0040cb50
add esp, 0x18
cmp dword [eax + 0x14], ebx
jb 0x411688
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x424]
push 0x106
push eax
call dword [sym.imp.MSVCR100.dll_wcscpy_s]
add esp, 0xc
cmp dword [ebp - 0x44c], ebx
jb 0x4116b5
mov ecx, dword [ebp - 0x460]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
lea edx, [ebp - 0x4c8]
lea eax, [ebp - 0x424]
mov ecx, 0x614
push edx
mov dword [ebp - 0x4c4], 3
mov dword [ebp - 0x4c0], eax
mov word [ebp - 0x4b8], cx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
mov byte [ebp - 4], 0
cmp dword [ebp - 0x4a4], edi
je 0x411739
lea ecx, [ebp - 0x4a4]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
mov eax, dword [ebp - 0x490]
mov edx, dword [ebp - 0x4a0]
push eax
mov eax, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x498]
push ecx
push edx
push eax
call fcn.0040cc00
mov ecx, dword [ebp - 0x4a4]
push ecx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 0x14
mov dword [ebp - 0x4a4], edi
mov dword [ebp - 0x4a0], edi
mov dword [ebp - 0x49c], edi
cmp dword [ebp - 0x468], ebx
jb 0x411762
mov edx, dword [ebp - 0x47c]
push edx
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 4