Function at 0x40c7d0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Delete registry key
Get common file path
Get file attributes
Inspect section memory permissions
Move file
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x473c37
mov eax, dword fs:[0]
push eax
sub esp, 0xe04
mov eax, dword [0x498068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x784], ebx
mov ecx, 0x1000001
mov dword [ebp - 0x788], edi
call fcn.004044c0
lea ecx, [ebp - 0x7b8]
mov dword [ebp - 0x7b8], ebx
call fcn.00404820
cmp dword [0x49ad28], ebx
jg 0x40c86f
push edi
push 0x8e
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
mov dword [ebp - 4], edi
lea ecx, [eax + 8]
push dword [ebp - 0x7b8]
mov ebx, 1
mov edx, str.After_DeleteFiles::Run__:_product_info:_count
mov dword [ebp - 0x784], ebx
call fcn.00407b40
mov ecx, eax
call fcn.00405ad0
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x40c88f
and ebx, 0xfffffffe
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 1
call fcn.00401a10
lea ecx, [ebp - 0x5d0]
call fcn.00401a30
sub esp, 0x18
mov dword [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484f10
call fcn.004059b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 3
call fcn.00442050
add esp, 0x18
cmp dword [0x49ad14], 1
jne 0x40c929
cmp dword [0x49ad28], 3
jg 0x40c929
test al, al
jne 0x40c929
push 3
push 0x95
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 2
mov byte [ebp - 4], 5
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_result.
call fcn.00407b40
mov dword [ebp - 4], 3
test bl, 2
je 0x40c949
and ebx, 0xfffffffd
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x480]
call fcn.00401920
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x480]
call fcn.00427430
push eax
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 7
call fcn.00401920
lea ecx, [ebp - 0x4e0]
call fcn.00427330
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 9
call fcn.00401850
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xa
call fcn.00401850
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xb
call fcn.00401a10
lea ecx, [ebp - 0x6a8]
call fcn.00406950
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484f34
call fcn.004059b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xd
call fcn.00441ca0
add esp, 0x18
cmp dword [0x49ad14], 1
jne 0x40ca3e
cmp dword [0x49ad28], 3
jg 0x40ca3e
test al, al
jne 0x40ca3e
push 3
push 0x9a
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 4
mov byte [ebp - 4], 0xf
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_result.
call fcn.00407b40
mov dword [ebp - 4], 0xd
test bl, 4
je 0x40ca5e
and ebx, 0xfffffffb
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
push 0x484f04
lea ecx, [ebp - 0x6a8]
call fcn.0040baf0
test al, al
jne 0x40cad5
cmp dword [0x49ad14], 1
jne 0x40cab5
cmp dword [0x49ad28], 3
jg 0x40cab5
push 3
push 0xa5
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 8
mov byte [ebp - 4], 0x10
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_false.
call fcn.00407b40
mov dword [ebp - 4], 0xd
test bl, 8
je 0x40fe25
lea ecx, [ebp - 0x87c]
call fcn.00425b00
jmp 0x40fe25
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00452a30
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 0
push 0
push 0x2b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp dword [0x49ad14], 1
jne 0x40cb47
cmp dword [0x49ad28], 3
jg 0x40cb47
test eax, eax
je 0x40cb47
push 3
push 0xac
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 0x10
mov byte [ebp - 4], 0x1b
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_hr__S_OK.
call fcn.00407b40
mov dword [ebp - 4], 0xd
test bl, 0x10
je 0x40cb67
and ebx, 0xffffffef
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
lea ecx, [ebp - 0x6d8]
call fcn.00401900
lea edx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1c
mov ecx, 0x66
call fcn.0042c0b0
push str.regsvr32.exe
lea ecx, [ebp - 0x480]
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00427150
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x20
call fcn.00401850
push str.Uninstall.xml
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x1f
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x28
call fcn.00401850
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x27
mov byte [ebp - 0x799], 0
call fcn.00401810
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push eax
call esi
cmp eax, 0xffffffff
jne 0x40ce4c
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7a8], 0
push 0x20019
push str.SoftwareTencentQQ2009
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x2d
call fcn.00424ae0
test eax, eax
jne 0x40cf2e
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x38
call fcn.00401a10
lea ecx, [ebp - 0x438]
call fcn.00401a30
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x3a
push eax
push str.version
lea ecx, [ebp - 0x7ac]
call fcn.00424e60
test eax, eax
jne 0x40cf1b
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x40cf1b
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x4e
call fcn.00401a10
lea ecx, [ebp - 0x498]
call fcn.00401a30
sub esp, 0x18
mov byte [ebp - 4], 0x50
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0x484f48
call fcn.004059b0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x50
call fcn.00442050
add esp, 0x18
lea eax, [ebp - 0x498]
lea ecx, [ebp - 0x4c8]
push eax
call fcn.00401920
push str.Uninstall.xml
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x52
call fcn.004018b0
push str.Uninstall
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x53
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x528]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00427150
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x55
push ecx
lea ecx, [ebp - 0x450]
push ecx
mov ecx, eax
call fcn.00427150
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x56
push ecx
lea ecx, [ebp - 0x510]
push ecx
mov ecx, eax
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x58
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x59
call fcn.00401850
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x5b
call fcn.00401850
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x540]
call fcn.00401850
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x60
call fcn.00401810
push eax
call esi
cmp eax, 0xffffffff
je 0x40ceea
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x690]
call fcn.00401c00
lea ecx, [ebp - 0x510]
mov byte [ebp - 0x799], 1
mov byte [ebp - 4], 0x52
call fcn.00401850
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x50
call fcn.00401850
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x7a
call fcn.00401850
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x7f
call fcn.00401850
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x27
call fcn.004249c0
push 0
push 1
lea ecx, [ebp - 0xe10]
call fcn.0043f0a0
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x84
call fcn.00401810
push eax
lea ecx, [ebp - 0xe10]
call fcn.0043f420
cmp dword [ebp - 0xde0], 0
je 0x40cf42
cmp dword [0x49ad28], 2
jg 0x40ceca
push 2
push 0xd6
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
mov byte [ebp - 4], 0x85
lea ecx, [eax + 8]
push dword [ebp - 0xde0]
or ebx, 0x20
mov edx, str.ErrorID_
mov dword [ebp - 0x784], ebx
call fcn.00407b40
mov ecx, eax
call fcn.00405e10
mov dword [ebp - 4], 0x84
test bl, 0x20
je 0x40fde9
lea ecx, [ebp - 0x87c]
call fcn.00425b00
jmp 0x40fde9
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x52
call fcn.00401850
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x50
call fcn.00401850
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x66
call fcn.00401850
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x6b
call fcn.00401850
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x27
call fcn.004249c0
jmp 0x40fdf8
push 0x484e1c
lea ecx, [ebp - 0xe10]
call fcn.0040c270
mov dword [ebp - 0x7a8], eax
test eax, eax
jne 0x40cfb6
cmp dword [0x49ad28], 2
jg 0x40cf96
push 2
push 0xdc
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 0x40
mov byte [ebp - 4], 0x90
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.uninstall_root__NULL
call fcn.00407b40
mov dword [ebp - 4], 0x84
test bl, 0x40
je 0x40fde9
lea ecx, [ebp - 0x87c]
call fcn.00425b00
jmp 0x40fde9
push str.Version
mov ecx, eax
call fcn.0040c270
push 0
push str.versionnum
mov ecx, eax
call fcn.0043ea60
mov dword [ebp - 0x78c], eax
test eax, eax
jne 0x40d036
cmp dword [0x49ad28], 2
jg 0x40d017
push 2
push 0xe2
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 0x80
mov byte [ebp - 4], 0x9b
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.version_num_value__NULL
call fcn.00407b40
mov dword [ebp - 4], 0x84
test bl, bl
jns 0x40fde9
lea ecx, [ebp - 0x87c]
call fcn.00425b00
jmp 0x40fde9
mov byte [ebp - 4], 0xa6
mov dword [ebp - 0x7c4], 0
mov dword [ebp - 0x7c0], 0
mov dword [ebp - 0x7bc], 0
push eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xa8
call fcn.004059b0
lea eax, [ebp - 0x7c4]
mov byte [ebp - 4], 0xa9
push eax
mov dl, 0x2e
lea ecx, [ebp - 0x480]
call fcn.0042d190
add esp, 4
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xaa
call fcn.004057e0
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0xa8
call fcn.00410080
cmp eax, 2
jne 0x40d181
mov byte [ebp - 4], 0xa8
mov esi, dword [ebp - 0x7c4]
mov ecx, esi
call fcn.004056f0
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x7cc]
mov edx, dword [esi + 0x10]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa8
lea edx, [eax + edx]
call fcn.0042bb20
add esp, 4
mov byte [ebp - 4], 0xa8
mov esi, dword [ebp - 0x7c4]
lea ecx, [esi + 0x18]
call fcn.004056f0
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x7c8]
mov edx, dword [esi + 0x28]
push ecx
add edx, eax
mov byte [ebp - 4], 0xa8
mov ecx, eax
call fcn.0042bb20
add esp, 4
cmp dword [ebp - 0x7cc], 1
jne 0x40d120
cmp dword [ebp - 0x7c8], 0
je 0x40d1e4
cmp dword [0x49ad28], 0
jg 0x40d16a
push 0
push 0xf1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
mov byte [ebp - 4], 0xbb
lea ecx, [eax + 8]
or ebx, 0x100
mov edx, str.version_num_
mov dword [ebp - 0x784], ebx
call fcn.00407b40
mov edx, dword [ebp - 0x78c]
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x100
je 0x40d1e4
and ebx, 0xfffffeff
jmp 0x40d1d3
cmp dword [0x49ad28], 2
jg 0x40d1be
push 2
push 0xf6
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 0x200
mov byte [ebp - 4], 0xbc
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.version_num_invalid
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x200
je 0x40d1e4
and ebx, 0xfffffdff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
mov esi, dword [ebp - 0x7a8]
mov ecx, esi
push str.Regsvr
call fcn.0040c270
test eax, eax
je 0x40db0d
push str.Moudle
mov ecx, eax
call fcn.0040c270
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40db0d
mov edi, eax
nop word [eax + eax]
push 0
push str.type
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
jne 0x40d27a
cmp dword [0x49ad28], 3
jg 0x40d27a
test esi, esi
jne 0x40d27a
push 3
push 0x103
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
or ebx, 0x400
mov byte [ebp - 4], 0xbd
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_type.
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x400
je 0x40d2a0
and ebx, 0xfffffbff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40d310
cmp dword [0x49ad28], 2
jg 0x40d2e1
push 2
push 0x105
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00425970
or ebx, 0x800
mov byte [ebp - 4], 0xbe
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.type__NULL
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x800
je 0x40daee
and ebx, 0xfffff7ff
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40daee
mov ecx, 0x484e74
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40d337
test dl, dl
je 0x40d333
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40d337
add eax, 2
add ecx, 2
test dl, dl
jne 0x40d317
xor eax, eax
jmp 0x40d33c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40d67a
push eax
push str.path
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
jne 0x40d39d
cmp dword [0x49ad28], 3
jg 0x40d39d
test esi, esi
jne 0x40d39d
push 3
push 0x10b
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00425970
or ebx, 0x1000
mov byte [ebp - 4], 0xbf
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.Check_failed:_path.
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x1000
je 0x40d3c3
and ebx, 0xffffefff
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40d433
cmp dword [0x49ad28], 2
jg 0x40d404
push 2
push 0x10d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00425970
or ebx, 0x2000
mov byte [ebp - 4], 0xc0
lea ecx, [eax + 8]
mov dword [ebp - 0x784], ebx
mov edx, str.path__NULL
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x2000
je 0x40daee
and ebx, 0xffffdfff
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40daee
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xc1
call fcn.00401a10
lea ecx, [ebp - 0x4f8]
call fcn.00406950
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xc3
call fcn.00401a10
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xc4
call fcn.00406950
push str._intallpath_
lea ecx, [ebp - 0x510]
call fcn.00406970
push esi
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xc5
call fcn.004059b0
lea edx, [ebp - 0x5d0]
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x750]
call fcn.0042dec0
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xc7
push ecx
push eax
lea edx, [ebp - 0x510]
lea ecx, [ebp - 0x480]
call fcn.0040c3e0
add esp, 8
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x750]
call fcn.004057e0
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xc5
call fcn.004057e0
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xc3
call fcn.004057e0
lea ecx, [ebp - 0x4c8]
call fcn.004059f0
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xc8
push eax
lea ecx, [ebp - 0x5e8]
call fcn.004018b0
push str._common_
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xc9
call fcn.004059b0
lea edx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xca
lea ecx, [ebp - 0x768]
call fcn.0042dec0
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xcb
push ecx
push eax
lea edx, [ebp - 0x540]
lea ecx, [ebp - 0x4f8]
call fcn.0040c3e0
add esp, 8
mov byte [ebp - 4], 0xca
lea ecx, [ebp - 0x768]
call fcn.004057e0
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xc9
call fcn.004057e0
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x5e8]
call fcn.00401850
lea ecx, [ebp - 0x490]
call fcn.00403010
lea eax, [ebp - 0x600]
mov byte [ebp - 0x48f], 1
push eax
lea ecx, [ebp - 0x438]
call fcn.00429760
push 0x486840
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0xcc
call fcn.004059b0
lea eax, [ebp - 0x678]
mov byte [ebp - 4], 0xcd
push eax
lea ecx, [ebp - 0x438]
call fcn.0042a320
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0xcc
call fcn.004057e0
push 0x486844
lea ecx, [ebp - 0x660]
call fcn.004059b0
lea eax, [ebp - 0x660]
mov byte [ebp - 4], 0xce
push eax
lea ecx, [ebp - 0x438]
call fcn.0042a320
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0xcc
call fcn.004057e0
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x438]
call fcn.0042a320
lea eax, [ebp - 0x78c]
mov dword [ebp - 0x78c], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x438]
call fcn.004245e0
add esp, 4
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x438]
call fcn.004297e0
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xc3
call fcn.004057e0
lea ecx, [ebp - 0x4f8]
jmp 0x40dae5
mov eax, 0x484ecc
nop
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x40d6a0
test cl, cl
je 0x40d69c
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x40d6a0
add esi, 2
add eax, 2
test cl, cl
jne 0x40d680
xor eax, eax
jmp 0x40d6a5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40daee
push eax
push str.path
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
jne 0x40d70c
cmp dword [0x49ad28], 3
jg 0x40d70c
test esi, esi
jne 0x40d70c
push 3
push 0x125
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00425970
mov byte [ebp - 4], 0xcf
or ebx, 0x4000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_path.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x4000
je 0x40d732
and ebx, 0xffffbfff
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40d7a8
cmp dword [0x49ad28], 2
jg 0x40d779
push 2
push 0x127
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00425970
mov byte [ebp - 4], 0xd0
or ebx, 0x8000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.path__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x8000
je 0x40daee
and ebx, 0xffff7fff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40daee
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40d7b0
sub ecx, edx
lea eax, [ecx - 0xd]
add eax, esi
push eax
push str.qqprotect.exe
call fcn.0045a008
add esp, 8
test eax, eax
je 0x40daee
lea ecx, [ebp - 0x588]
call fcn.004059f0
push str._intallpath_
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0xd1
call fcn.004059b0
push esi
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0xd2
call fcn.004059b0
lea edx, [ebp - 0x5d0]
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x780]
call fcn.0042dec0
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0xd4
push ecx
push eax
lea edx, [ebp - 0x618]
lea ecx, [ebp - 0x648]
call fcn.0040c3e0
add esp, 8
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x780]
call fcn.004057e0
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0xd2
call fcn.004057e0
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0xd1
call fcn.004057e0
lea ecx, [ebp - 0x570]
call fcn.004059f0
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0xd5
push eax
lea ecx, [ebp - 0x528]
call fcn.004018b0
push str._common_
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0xd6
call fcn.004059b0
lea edx, [ebp - 0x528]
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x738]
call fcn.0042dec0
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0xd8
push ecx
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0x588]
call fcn.0040c3e0
add esp, 8
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x738]
call fcn.004057e0
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0xd6
call fcn.004057e0
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0xd5
call fcn.00401850
push 0
push str.uninstall_arg
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
jne 0x40d95c
cmp dword [0x49ad28], 3
jg 0x40d95c
test esi, esi
jne 0x40d95c
push 3
push 0x137
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00425970
mov byte [ebp - 4], 0xd9
or ebx, 0x10000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_arg.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xd5
test ebx, 0x10000
je 0x40d982
and ebx, 0xfffeffff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40d9f8
cmp dword [0x49ad28], 2
jg 0x40d9c9
push 2
push 0x139
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov byte [ebp - 4], 0xda
or ebx, 0x20000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.arg__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xd5
test ebx, 0x20000
je 0x40dad0
and ebx, 0xfffdffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40dad0
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x7b4]
call fcn.0040c250
lea edx, [ebp - 0x7b4]
lea ecx, [ebp - 0x468]
call fcn.0042dfe0
push eax
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xdb
call fcn.00426c30
push eax
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xdc
call fcn.00429760
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xde
call fcn.00426c50
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xdf
call fcn.00401850
push esi
lea ecx, [ebp - 0x450]
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe0
push eax
lea ecx, [ebp - 0x558]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xdf
call fcn.004057e0
lea ecx, [ebp - 0x4a8]
call fcn.00403010
lea eax, [ebp - 0x794]
mov byte [ebp - 0x4a7], 1
push eax
lea edx, [ebp - 0x4a8]
mov dword [ebp - 0x794], 0
lea ecx, [ebp - 0x558]
call fcn.004245e0
add esp, 4
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x558]
call fcn.004297e0
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0xd1
call fcn.004057e0
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0xa8
call fcn.004057e0
push 0
mov ecx, edi
call fcn.0040c300
mov edi, eax
test edi, edi
jne 0x40d220
mov edi, dword [ebp - 0x788]
mov esi, dword [ebp - 0x7a8]
call fcn.00408720
test eax, eax
je 0x40e1e9
lea ecx, [ebp - 0x4c8]
call fcn.00426c20
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xe1
call fcn.00426c20
push str.BinQQShellExt.dll
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe2
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe3
push eax
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe5
call fcn.00401850
push str.BinQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe6
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe8
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00428210
test al, al
je 0x40dbd2
lea ecx, [ebp - 0x438]
call fcn.00428210
test al, al
jne 0x40dcae
push str.ShellExtQQShellExt.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xe9
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
push eax
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0xea
call fcn.00426c60
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xe9
call fcn.00426c50
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe8
call fcn.00401850
push str.ShellExtQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xeb
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xec
call fcn.00426c60
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xeb
call fcn.00426c50
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xe8
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00428210
test al, al
je 0x40e141
lea ecx, [ebp - 0x438]
call fcn.00428210
test al, al
je 0x40e141
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x558]
call fcn.00426c60
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00426c60
lea ecx, [ebp - 0x490]
call fcn.00403010
lea eax, [ebp - 0x600]
mov word [ebp - 0x490], 0x101
push eax
lea ecx, [ebp - 0x510]
call fcn.00429760
push 0x486840
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xee
push eax
lea ecx, [ebp - 0x510]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.004057e0
push 0x486844
lea ecx, [ebp - 0x450]
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xef
push eax
lea ecx, [ebp - 0x510]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xed
call fcn.004057e0
lea eax, [ebp - 0x558]
push eax
lea ecx, [ebp - 0x510]
call fcn.0042a460
lea eax, [ebp - 0x78c]
mov dword [ebp - 0x78c], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x510]
call fcn.004245e0
add esp, 4
call fcn.00425110
mov ecx, eax
call fcn.00402ff0
cmp eax, 1
jne 0x40de78
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00429760
push 0x486840
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xf0
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xf1
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xf0
call fcn.004057e0
push 0x486844
lea ecx, [ebp - 0x450]
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xf2
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xf0
call fcn.004057e0
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0042a460
lea eax, [ebp - 0x794]
mov dword [ebp - 0x794], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x4f8]
call fcn.004245e0
add esp, 4
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0x4f8]
call fcn.004297e0
lea ecx, [ebp - 0x5e8]
call fcn.00401900
sub esp, 0x18
mov byte [ebp - 4], 0xf3
mov ecx, esp
mov dword [ebp - 0x794], esp
push 0x484f24
call fcn.004059b0
mov byte [ebp - 4], 0xf4
lea ecx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xf3
call fcn.00442050
add esp, 0x18
lea ecx, [ebp - 0x5e8]
call fcn.00405620
test al, al
jne 0x40e121
lea eax, [ebp - 0x5e8]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00426c30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xf5
push ecx
mov ecx, eax
call fcn.00427430
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xf6
push ecx
mov ecx, eax
call fcn.00427310
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xf8
call fcn.00426c50
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0xf9
call fcn.00426c50
push str.ShellExtQQShellExt.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xfa
push eax
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x480]
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xfc
call fcn.00401850
push str.ShellExtQQShellExt64.dll
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xfd
push eax
lea eax, [ebp - 0x4f8]
push eax
lea ecx, [ebp - 0x480]
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0xff
call fcn.00401850
lea ecx, [ebp - 0x540]
call fcn.00428210
test al, al
je 0x40e0f4
lea ecx, [ebp - 0x4f8]
call fcn.00428210
test al, al
je 0x40e0f4
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x570]
call fcn.00429760
push 0x486840
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], 0x100
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x570]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0
call fcn.004057e0
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x570]
call fcn.0042a460
lea eax, [ebp - 0x794]
mov dword [ebp - 0x794], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x570]
call fcn.004245e0
add esp, 4
call fcn.00425110
mov ecx, eax
call fcn.00402ff0
cmp eax, 1
jne 0x40e0e2
lea eax, [ebp - 0x600]
push eax
lea ecx, [ebp - 0x588]
call fcn.00429760
push 0x486840
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 2
call fcn.004059b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x588]
call fcn.0042a320
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 2
call fcn.004057e0
lea eax, [ebp - 0x4f8]
push eax
lea ecx, [ebp - 0x588]
call fcn.0042a460
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x7a4], 0
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x588]
call fcn.004245e0
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x588]
call fcn.004297e0
lea ecx, [ebp - 0x570]
mov dword [ebp - 4], 0xff
call fcn.004297e0
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0xfc
call fcn.00426c50
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0xf9
call fcn.00426c50
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0xf3
call fcn.00426c50
lea ecx, [ebp - 0x5e8]
mov byte [ebp - 4], 0xed
call fcn.00401850
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0xe8
call fcn.004297e0
jmp 0x40e1ad
cmp dword [0x49ad28], 2
jg 0x40e187
push 2
push 0x1a1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov dword [ebp - 4], 0x104
or ebx, 0x40000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.qq_shell_path_not_exist.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xe8
test ebx, 0x40000
je 0x40e1ad
and ebx, 0xfffbffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xe5
call fcn.00426c50
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0xe2
call fcn.00426c50
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0xe1
call fcn.00426c50
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xa8
call fcn.00426c50
push str.Registry
mov ecx, esi
call fcn.0040c270
test eax, eax
je 0x40e90e
push 0x484eb8
mov ecx, eax
call fcn.0040c270
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40e90e
mov edi, eax
nop dword [eax]
push 0
push str.rootkey
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
mov dword [ebp - 0x794], esi
jne 0x40e289
cmp dword [0x49ad28], 3
jg 0x40e289
test esi, esi
jne 0x40e289
push 3
push 0x1cf
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov dword [ebp - 4], 0x105
or ebx, 0x80000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_root_key.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x80000
je 0x40e2af
and ebx, 0xfff7ffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40e328
cmp dword [0x49ad28], 2
jg 0x40e2f9
push 2
push 0x1d1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00425970
mov dword [ebp - 4], 0x106
or ebx, 0x100000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.root_key__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x100000
je 0x40e8f5
and ebx, 0xffefffff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40e8f5
mov edx, dword [str.HKCR]
mov ecx, esi
call fcn.0040c380
mov esi, eax
mov dword [ebp - 0x78c], esi
cmp esi, 0xffffffff
jne 0x40e3e2
mov edx, dword [str.HKEY_CLASSES_ROOT]
mov ecx, dword [ebp - 0x794]
call fcn.0040c380
mov esi, eax
mov dword [ebp - 0x78c], eax
cmp esi, 0xffffffff
jne 0x40e3e2
cmp dword [0x49ad14], 1
jne 0x40e3b3
cmp dword [0x49ad28], 3
jg 0x40e3b3
push 3
push 0x1da
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00425970
mov dword [ebp - 4], 0x107
or ebx, 0x200000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x200000
je 0x40e8f5
and ebx, 0xffdfffff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40e8f5
push 0
push str.subkey
mov ecx, edi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov dword [ebp - 0x7a4], eax
jne 0x40e449
cmp dword [0x49ad28], 3
jg 0x40e449
test eax, eax
jne 0x40e449
push 3
push 0x1df
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00425970
mov dword [ebp - 4], pe_nt_image_headers32
or ebx, 0x400000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_sub_key.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x400000
je 0x40e46f
and ebx, 0xffbfffff
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
mov eax, dword [ebp - 0x7a4]
test eax, eax
jne 0x40e4ee
cmp dword [0x49ad28], 2
jg 0x40e4bf
push 2
push 0x1e1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00425970
mov dword [ebp - 4], 0x109
or ebx, 0x800000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.sub_key__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0xa8
test ebx, 0x800000
je 0x40e8f5
and ebx, 0xff7fffff
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40e8f5
push eax
lea ecx, [ebp - 0x4a0]
call fcn.0040c210
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x438]
call fcn.0042dfe0
lea ecx, [ebp - 0x7b4]
mov dword [ebp - 4], 0x10a
call fcn.004249b0
push 2
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0xb
call fcn.00401810
push eax
push dword [esi*4 + 0x486dd4]
lea ecx, [ebp - 0x7b4]
call fcn.00424ae0
test eax, eax
je 0x40e5ed
cmp dword [0x49ad28], 2
jg 0x40e5be
push 2
push 0x1e9
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00425970
mov byte [ebp - 4], 0xc
or ebx, 0x1000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.open_key:
mov ecx, eax
call fcn.00407b40
mov edx, dword [ebp - 0x794]
mov ecx, eax
call fcn.00407b40
mov edx, 0x4869ac
mov ecx, eax
call fcn.00407b40
lea edx, [ebp - 0x438]
mov ecx, eax
call fcn.00409d50
mov edx, str.failed
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x10b
test ebx, 0x1000000
je 0x40e8d4
and ebx, 0xfeffffff
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40e8d4
push str.Value
mov ecx, edi
call fcn.0040c270
mov esi, eax
test esi, esi
je 0x40e784
push 0
push 0x484ed8
mov ecx, esi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov dword [ebp - 0x794], eax
jne 0x40e667
cmp dword [0x49ad28], 3
jg 0x40e667
test eax, eax
jne 0x40e667
push 3
push 0x1fd
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00425970
mov byte [ebp - 4], 0xd
or ebx, 0x2000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_name.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x10b
test ebx, 0x2000000
je 0x40e68d
and ebx, 0xfdffffff
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
mov eax, dword [ebp - 0x794]
test eax, eax
jne 0x40e706
cmp dword [0x49ad28], 2
jg 0x40e6da
push 2
push 0x1ff
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x87c]
call fcn.00425970
mov byte [ebp - 4], 0xe
or ebx, 0x4000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.name__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x10b
test ebx, 0x4000000
je 0x40e771
and ebx, 0xfbffffff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
jmp 0x40e771
push eax
lea ecx, [ebp - 0x488]
call fcn.0040c210
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x4c8]
call fcn.0042dfe0
mov edx, 0x4869e4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4c8]
call fcn.00408870
test al, al
je 0x40e74b
push 0x4849fc
lea ecx, [ebp - 0x4c8]
call fcn.00401820
lea ecx, [ebp - 0x4c8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x7b4]
call fcn.00424c20
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0xb
call fcn.00401850
push 0
mov ecx, esi
call fcn.0040c300
mov esi, eax
test esi, esi
jne 0x40e603
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0x7a4], 0
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x7a0], 0
call fcn.00401810
mov esi, dword [ebp - 0x78c]
push eax
push dword [esi*4 + 0x486dd4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40e8d4
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x794]
push eax
push 0
push 0
lea eax, [ebp - 0x7a4]
push eax
push 0
push 0
push 0
push dword [ebp - 0x7a0]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x40e8d4
cmp dword [ebp - 0x7a4], eax
jne 0x40e8d4
cmp dword [ebp - 0x794], eax
jne 0x40e8d4
lea ecx, [ebp - 0x438]
call fcn.00401810
push eax
push dword [esi*4 + 0x486dd4]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
jne 0x40e8d4
push 0xffffffffffffffff
push 0x5c
lea ecx, [ebp - 0x438]
call fcn.00410130
push eax
push 0
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x438]
call fcn.004100d0
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x10
call fcn.00410170
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xb
call fcn.00401850
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0x7a4], 0
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x7a0], 0
call fcn.00401810
push eax
push dword [esi*4 + 0x486dd4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x40e7d7
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 0xa
call fcn.004249c0
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 0xa8
call fcn.00401850
push 0
mov ecx, edi
call fcn.0040c300
mov edi, eax
test edi, edi
jne 0x40e220
mov edi, dword [ebp - 0x788]
lea ecx, [ebp - 0x6f0]
call fcn.004059f0
sub esp, 0x18
mov dword [ebp - 4], 0x111
mov ecx, esp
mov dword [ebp - 0x78c], esp
push str.UninstallFrom
call fcn.004059b0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 0x11
call fcn.00441ca0
add esp, 0x18
lea ecx, [ebp - 0x6f0]
mov edx, str.SetupExe
call fcn.00410530
test al, al
je 0x40e9a8
lea ecx, [ebp - 0x7b4]
call fcn.004249b0
push 2
push 0x4869e8
push closesocket
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 0x13
call fcn.00424ae0
test eax, eax
jne 0x40e999
push str.QQ2009
lea ecx, [ebp - 0x7b4]
call fcn.00424c20
lea ecx, [ebp - 0x7b4]
mov byte [ebp - 4], 0x11
call fcn.004249c0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452a30
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
add esp, 0xc
push 1
push 0x19
push eax
push 0
call esi
test eax, eax
je 0x40ea88
push 0x486a54
lea ecx, [ebp - 0x528]
call fcn.004018b0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x468]
call fcn.00426c30
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x16
push ecx
lea ecx, [ebp - 0x480]
push ecx
mov ecx, eax
call fcn.00427150
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x18
call fcn.00426c50
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x19
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x1a
call fcn.00401850
lea ecx, [ebp - 0x480]
call fcn.00428210
test al, al
je 0x40ea79
xor dl, dl
lea ecx, [ebp - 0x480]
call fcn.0040c460
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x11
call fcn.00426c50
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00452a30
add esp, 0xc
lea eax, [ebp - 0x218]
push 1
push 0x1a
push eax
push 0
call esi
test eax, eax
je 0x40ebad
push 0x486a54
lea ecx, [ebp - 0x5a0]
call fcn.004018b0
push str.MicrosoftInternet_ExplorerQuick_Launch
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x1b
call fcn.004018b0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00426c30
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [ebp - 0x468]
push ecx
mov ecx, eax
call fcn.00427150
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x1f
push ecx
lea ecx, [ebp - 0x480]
push ecx
mov ecx, eax
call fcn.00427150
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x21
call fcn.00426c50
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0x22
call fcn.00426c50
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x23
call fcn.00401850
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x24
call fcn.00401850
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x25
call fcn.00401850
lea ecx, [ebp - 0x480]
call fcn.00428210
test al, al
je 0x40eb9e
xor dl, dl
lea ecx, [ebp - 0x480]
call fcn.0040c460
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x11
call fcn.00426c50
push 0
push 0
push 0x3000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push str.BinQQProtectBinQQProtect.exe
lea ecx, [ebp - 0x450]
call fcn.004018b0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x28
call fcn.00401850
lea ecx, [ebp - 0x708]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQProtect.exe
mov ecx, eax
call fcn.0041ba40
push str.QQProtectBinQQProtect.exe
lea ecx, [ebp - 0x528]
call fcn.004018b0
lea eax, [ebp - 0x528]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x720]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x2b
call fcn.00401850
lea ecx, [ebp - 0x720]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQProtect
mov ecx, eax
call fcn.0041ba40
push str.BinQQ.exe
lea ecx, [ebp - 0x5a0]
call fcn.004018b0
lea eax, [ebp - 0x5a0]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, 0x486524
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2c
call fcn.00426c50
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x2b
call fcn.00401850
push str.Bin_auclt.exe
lea ecx, [ebp - 0x618]
call fcn.004018b0
lea eax, [ebp - 0x618]
mov byte [ebp - 4], 0x2e
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQUpdate
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2e
call fcn.00426c50
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0x2b
call fcn.00401850
push str.Bin_txupd.exe
lea ecx, [ebp - 0x648]
call fcn.004018b0
lea eax, [ebp - 0x648]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.QQUpdate2011
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x30
call fcn.00426c50
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x2b
call fcn.00401850
push str.BinSetupExSetupEx.exe
lea ecx, [ebp - 0x660]
call fcn.004018b0
lea eax, [ebp - 0x660]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.SetupEX
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x32
call fcn.00426c50
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0x2b
call fcn.00401850
push str.BinmaLauncher.exe
lea ecx, [ebp - 0x678]
call fcn.004018b0
lea eax, [ebp - 0x678]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.maLauncher
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x34
call fcn.00426c50
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0x2b
call fcn.00401850
push str.BinmaUpdat.exe
lea ecx, [ebp - 0x480]
call fcn.004018b0
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00427150
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov edx, str.maUpdat
mov ecx, eax
call fcn.0041ba40
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x36
call fcn.00426c50
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x2b
call fcn.00401850
lea ecx, [ebp - 0x630]
call fcn.00426c20
lea edx, [ebp - 0x630]
mov byte [ebp - 4], 0x38
mov ecx, 0x6c
call fcn.0042c0b0
push str.TencentQQ_rdo.cache
lea ecx, [ebp - 0x540]
call fcn.004018b0
lea eax, [ebp - 0x540]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00427150
xor dl, dl
mov byte [ebp - 4], 0x3a
mov ecx, eax
call fcn.0040c460
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x39
call fcn.00426c50
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x38
call fcn.00401850
push str.TencentQQloginrdo.cache
lea ecx, [ebp - 0x4c8]
call fcn.004018b0
lea eax, [ebp - 0x4c8]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00427150
xor dl, dl
mov byte [ebp - 4], 0x3c
mov ecx, eax
call fcn.0040c460
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x3b
call fcn.00426c50
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x38
call fcn.00401850
push str.TencentQQurdo.cache
lea ecx, [ebp - 0x558]
call fcn.004018b0
lea eax, [ebp - 0x558]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x630]
call fcn.00427150
xor dl, dl
mov byte [ebp - 4], 0x3e
mov ecx, eax
call fcn.0040c460
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x3d
call fcn.00426c50
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0x38
call fcn.00401850
lea ecx, [ebp - 0x5b8]
call fcn.00426c20
lea edx, [ebp - 0x5b8]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x4e0]
call fcn.0041ced0
test al, al
je 0x40f199
lea ecx, [ebp - 0x5b8]
call fcn.00428460
test al, al
je 0x40f09c
sub esp, 0x18
lea ecx, [ebp - 0x5b8]
mov esi, esp
mov dword [ebp - 0x78c], esp
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
mov ecx, esi
call fcn.004018b0
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
mov dword [ebp - 0x794], esp
push str.DeleteFileTempPath
call fcn.004059b0
mov byte [ebp - 4], 0x41
mov byte [ebp - 4], 0x3f
call fcn.00441e30
add esp, 0x30
jmp 0x40f29e
cmp dword [0x49ad28], 1
jg 0x40f109
push 1
push 0x2ca
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x5b8]
or ebx, 0x8000000
mov dword [ebp - 0x784], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.Create_remove_file_temp_directory
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov edi, dword [ebp - 0x788]
mov dword [ebp - 4], 0x13f
test ebx, 0x8000000
je 0x40f12f
and ebx, 0xf7ffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
cmp dword [0x49ad14], 1
jne 0x40f17b
cmp dword [0x49ad28], 3
jg 0x40f17b
push 3
push 0x2cb
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov byte [ebp - 4], 0x43
or ebx, 0x10000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x13f
test ebx, 0x10000000
je 0x40f29e
and ebx, 0xefffffff
jmp 0x40f28d
cmp dword [0x49ad28], 1
jg 0x40f206
push 1
push 0x2d0
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x5b8]
or ebx, 0x20000000
mov dword [ebp - 0x784], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.Get_remove_file_temp_directory
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov edi, dword [ebp - 0x788]
mov dword [ebp - 4], 0x13f
test ebx, 0x20000000
je 0x40f22c
and ebx, 0xdfffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
cmp dword [0x49ad14], 1
jne 0x40f278
cmp dword [0x49ad28], 3
jg 0x40f278
push 3
push 0x2d1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov byte [ebp - 4], 0x45
or ebx, 0x40000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_false.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x13f
test ebx, 0x40000000
je 0x40f29e
and ebx, 0xbfffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
mov ecx, dword [ebp - 0x7a8]
push str.Files
call fcn.0040c270
mov dword [ebp - 0x7a8], eax
test eax, eax
je 0x40fd76
push str.File
mov ecx, eax
call fcn.0040c270
mov dword [ebp - 0x78c], eax
test eax, eax
je 0x40f864
push 0
push str.path
mov ecx, eax
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov esi, eax
jne 0x40f336
cmp dword [0x49ad28], 3
jg 0x40f336
test esi, esi
jne 0x40f336
push 3
push 0x2ee
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov byte [ebp - 4], 0x46
or ebx, 0x80000000
mov ecx, eax
mov dword [ebp - 0x784], ebx
call fcn.00403000
mov edx, str.Check_failed:_path_name.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x13f
test ebx, ebx
jns 0x40f358
and ebx, 0x7fffffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x784], ebx
call fcn.00425b00
test esi, esi
jne 0x40f3ca
cmp dword [0x49ad28], 2
jg 0x40f39c
push 2
push 0x2f1
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00425970
mov byte [ebp - 4], 0x47
or edi, 1
mov ecx, eax
mov dword [ebp - 0x788], edi
call fcn.00403000
mov edx, str.path_name__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x13f
mov eax, dword [ebp - 0x788]
test al, 1
je 0x40f840
and eax, 0xfffffffe
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], eax
call fcn.00425b00
jmp 0x40f840
push esi
lea ecx, [ebp - 0x488]
call fcn.0040c210
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x468]
call fcn.0042dfe0
push eax
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x48
call fcn.00426c30
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x4a
call fcn.00401850
lea ecx, [ebp - 0x4b0]
call fcn.00426c20
lea eax, [ebp - 0x78d]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x4b0]
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x438]
call fcn.0041c520
add esp, 8
test al, al
je 0x40f822
cmp byte [ebp - 0x78d], 0
je 0x40f5c7
cmp dword [0x49ad28], 1
jg 0x40f4aa
push 1
push 0x2fc
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x788]
or eax, 2
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.exist_dir_to_delete_a_file_:
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp - 0x788]
test al, 2
je 0x40f4cf
and eax, 0xfffffffd
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x788], eax
call fcn.00425b00
lea ecx, [ebp - 0x4b0]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x40f822
cmp dword [0x49ad28], 1
jg 0x40f599
push 1
push 0x2ff
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xbec]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 4
mov dword [ebp - 0x788], eax
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.rename
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._to
mov ecx, eax
call fcn.00407b40
mov edx, ebx
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov ebx, dword [ebp - 0x784]
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp - 0x788]
test al, 4
je 0x40f822
and eax, 0xfffffffb
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x788], eax
call fcn.00425b00
jmp 0x40f822
lea ecx, [ebp - 0x4b0]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x40f6b1
xor dl, dl
lea ecx, [ebp - 0x4b0]
call fcn.0040c460
test al, al
jne 0x40f822
cmp dword [0x49ad28], 1
jg 0x40f681
push 1
push 0x308
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xb3c]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 8
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.delete_file:
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.004263f0
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp - 0x788]
test al, 8
je 0x40f6a6
and eax, 0xfffffff7
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 0x788], eax
call fcn.00425b00
lea ecx, [ebp - 0x4b0]
jmp 0x40f81d
cmp dword [0x49ad28], 1
jg 0x40f747
push 1
push 0x30e
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc9c]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x4b0]
mov eax, dword [ebp - 0x788]
or eax, 0x10
mov dword [ebp - 0x788], eax
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.rename
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._to
mov ecx, eax
call fcn.00407b40
mov edx, ebx
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov ebx, dword [ebp - 0x784]
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp - 0x788]
test al, 0x10
je 0x40f76c
and eax, 0xffffffef
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x788], eax
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x438]
call fcn.0040c460
test al, al
jne 0x40f822
cmp dword [0x49ad28], 1
jg 0x40f7f2
push 1
push 0x313
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xa8c]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x438]
mov eax, dword [ebp - 0x788]
or eax, 0x20
mov dword [ebp - 0x788], eax
call fcn.00401a00
mov ecx, eax
call fcn.00401810
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.delete_file:
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.004263f0
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp - 0x788]
test al, 0x20
je 0x40f817
and eax, 0xffffffdf
lea ecx, [ebp - 0xa8c]
mov dword [ebp - 0x788], eax
call fcn.00425b00
lea ecx, [ebp - 0x438]
call fcn.004281a0
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x4a
call fcn.00426c50
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x3f
call fcn.00426c50
mov ecx, dword [ebp - 0x78c]
push str.File
call fcn.0040c300
mov edi, dword [ebp - 0x788]
mov dword [ebp - 0x78c], eax
test eax, eax
jne 0x40f2d6
lea ecx, [ebp - 0x798]
call fcn.00410050
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x7a8]
push 0x484e48
call fcn.0040c270
mov ebx, dword [ebp - 0x788]
mov esi, eax
test esi, esi
je 0x40f9cd
push 0
push str.path
mov ecx, esi
call fcn.0043ea60
cmp dword [0x49ad14], 1
mov edi, eax
jne 0x40f8f0
cmp dword [0x49ad28], 3
jg 0x40f8f0
test edi, edi
jne 0x40f8f0
push 3
push 0x32a
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov byte [ebp - 4], 0x52
or ebx, 0x40
mov ecx, eax
mov dword [ebp - 0x788], ebx
call fcn.00403000
mov edx, str.Check_failed:_path_name.
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x151
test bl, 0x40
je 0x40f910
and ebx, 0xffffffbf
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x788], ebx
call fcn.00425b00
test edi, edi
jne 0x40f97b
cmp dword [0x49ad28], 2
jg 0x40f957
push 2
push 0x32d
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00425970
mov byte [ebp - 4], 0x53
or ebx, 0x80
mov ecx, eax
mov dword [ebp - 0x788], ebx
call fcn.00403000
mov edx, str.path_name__NULL
mov ecx, eax
call fcn.00407b40
mov dword [ebp - 4], 0x151
test bl, bl
jns 0x40f9b7
and ebx, 0xffffff7f
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], ebx
call fcn.00425b00
jmp 0x40f9b7
push edi
lea ecx, [ebp - 0x488]
call fcn.0040c210
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0x468]
call fcn.0042dfe0
push eax
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0x54
call fcn.00410000
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x51
call fcn.00401850
push 0x484e48
mov ecx, esi
call fcn.0040c300
mov esi, eax
test esi, esi
jne 0x40f893
mov byte [ebp - 0x78c], 0
lea ecx, [ebp - 0x798]
push dword [ebp - 0x78c]
call fcn.00410570
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040ff50
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040ff40
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040fef0
test al, al
je 0x40fd67
nop dword [eax]
lea ecx, [ebp - 0x7a0]
call fcn.0040ff30
push eax
lea ecx, [ebp - 0x438]
call fcn.00426c30
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x55
call fcn.00426c20
lea eax, [ebp - 0x78d]
mov byte [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x498]
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x438]
call fcn.0041c520
add esp, 8
test al, al
je 0x40fd0f
cmp byte [ebp - 0x78d], 0
je 0x40fba1
lea ecx, [ebp - 0x438]
call fcn.0042e300
test al, al
je 0x40fd0f
lea ecx, [ebp - 0x498]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x40fad6
xor dl, dl
lea ecx, [ebp - 0x498]
call fcn.0040c460
jmp 0x40fd0f
cmp dword [0x49ad28], 1
jg 0x40fb69
push 1
push 0x34b
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0xc0]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x498]
or ebx, 0x100
mov dword [ebp - 0x788], ebx
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.rename
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._to
mov ecx, eax
call fcn.00407b40
mov edx, ebx
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov ebx, dword [ebp - 0x788]
mov dword [ebp - 4], 0x156
test ebx, 0x100
je 0x40fb8f
and ebx, 0xfffffeff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x788], ebx
call fcn.00425b00
xor dl, dl
lea ecx, [ebp - 0x438]
call fcn.0040c460
jmp 0x40fd0f
cmp dword [0x49ad28], 1
jg 0x40fbfc
push 1
push 0x353
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x92c]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x438]
or ebx, 0x200
mov dword [ebp - 0x788], ebx
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.exist_file_to_delete_a_dir_:
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov dword [ebp - 4], 0x156
test ebx, 0x200
je 0x40fc22
and ebx, 0xfffffdff
lea ecx, [ebp - 0x92c]
mov dword [ebp - 0x788], ebx
call fcn.00425b00
lea ecx, [ebp - 0x498]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
lea ecx, [ebp - 0x438]
call fcn.00401a00
mov ecx, eax
call fcn.00401810
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x40fd0f
cmp dword [0x49ad28], 1
jg 0x40fce9
push 1
push 0x356
push str.d:devopsworkspacep_37d34ce895ed4865ac95061b653d796fmisc_setup3hummersetupuninstalldelete_files.cpp
lea ecx, [ebp - 0x9dc]
call fcn.00425970
mov edi, eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x498]
or ebx, 0x400
mov dword [ebp - 0x788], ebx
call fcn.00401a00
lea ecx, [ebp - 0x438]
mov ebx, eax
call fcn.00401a00
mov ecx, edi
mov esi, eax
call fcn.00403000
mov edx, str.rename
mov ecx, eax
call fcn.00407b40
mov edx, esi
mov ecx, eax
call fcn.00409d50
mov edx, str._to
mov ecx, eax
call fcn.00407b40
mov edx, ebx
mov ecx, eax
call fcn.00409d50
mov edx, str._failed.
mov ecx, eax
call fcn.00407b40
mov ebx, dword [ebp - 0x788]
mov dword [ebp - 4], 0x156
test ebx, 0x400
je 0x40fd0f
and ebx, 0xfffffbff
lea ecx, [ebp - 0x9dc]
mov dword [ebp - 0x788], ebx
call fcn.00425b00
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x55
call fcn.00426c50
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x51
call fcn.00426c50
push 0
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040ff10
lea eax, [ebp - 0x7a8]
push eax
lea ecx, [ebp - 0x798]
call fcn.0040ff40
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040fef0
test al, al
jne 0x40fa20
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0x3f
call fcn.0040ff60
cmp byte [ebp - 0x799], 0
jne 0x40fd8c
xor dl, dl
lea ecx, [ebp - 0x690]
call fcn.0040c460
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0x38
call fcn.00426c50
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 0x2b
call fcn.00426c50
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x28
call fcn.00426c50
lea ecx, [ebp - 0x708]
mov byte [ebp - 4], 0x11
call fcn.00426c50
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 4], 0xa8
call fcn.004057e0
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0x84
call fcn.004100a0
lea ecx, [ebp - 0xe10]
mov byte [ebp - 4], 0x27
call fcn.0043f320
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x1f
call fcn.00426c50
lea ecx, [ebp - 0x600]
mov byte [ebp - 4], 0x1c
call fcn.00426c50
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0xd
call fcn.00426c50
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0xa
call fcn.004057e0
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 3
call fcn.00426c50
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 4], 0xffffffff
call fcn.00401850
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00450164
mov esp, ebp
pop ebp
ret 4