Function at 0x413420
Capabilities:
Contain obfuscated stackstrings
Delete registry key
Get common file path
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4be9ed
mov eax, dword fs:[0]
push eax
sub esp, 0xe30
mov eax, dword [0x4e44b4]
xor eax, esp
mov dword [esp + 0xe28], eax
push ebx
push esi
push edi
mov eax, dword [0x4e44b4]
xor eax, esp
push eax
lea eax, [esp + 0xe40]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x380], 7
mov dword [esp + 0x37c], ebx
mov word [esp + 0x36c], bx
sub esp, 0x1c
mov dword [esp + 0xe64], ebx
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0x13
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push 0x4ca7e4
lea esi, [esp + 0x38c]
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401be0
mov edi, 1
add esp, 0x1c
cmp dword [0x4e8f68], edi
mov byte [esp + 0x17], al
jne 0x41350b
call fcn.004722e0
cmp eax, 3
jg 0x41350b
cmp byte [esp + 0x17], bl
jne 0x41350b
push 3
push 0x4b
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_result.
mov byte [esp + 0xe4c], 1
push eax
mov dword [esp + 0x18], edi
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], ebx
test byte [esp + 0x10], 1
je 0x41352a
and dword [esp + 0x10], 0xfffffffe
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov esi, 0xf
mov dword [esp + 0x364], esi
mov dword [esp + 0x360], ebx
mov byte [esp + 0x350], bl
lea eax, [esp + 0x34c]
push eax
sub esp, 0x1c
mov byte [esp + 0xe68], 2
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x13
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.PreviousInstallType
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401a70
add esp, 0x20
cmp dword [0x4e8f68], edi
mov byte [esp + 0x17], al
jne 0x4135c9
call fcn.004722e0
cmp eax, 3
jg 0x4135c9
cmp byte [esp + 0x17], bl
jne 0x4135c9
push 3
push 0x4f
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_result.
mov byte [esp + 0xe4c], 3
or dword [esp + 0x14], 2
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 2
test byte [esp + 0x10], 2
je 0x4135ec
and dword [esp + 0x10], 0xfffffffd
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov ecx, dword [esp + 0x360]
push 8
push str.NewSetup
push ecx
push ebx
lea ecx, [esp + 0x35c]
call fcn.004060e0
test eax, eax
je 0x413699
cmp dword [0x4e8f68], edi
jne 0x413655
call fcn.004722e0
cmp eax, 3
jg 0x413655
push 3
push 0x53
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_false.
mov byte [esp + 0xe4c], 4
or dword [esp + 0x14], 4
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 2
test byte [esp + 0x10], 4
je 0x413673
lea ecx, [esp + 0xe8]
call fcn.00472c30
cmp dword [esp + 0x364], 0x10
jb 0x41368d
mov edx, dword [esp + 0x350]
push edx
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x364], esi
jmp 0x4158a7
push 0x206
lea ecx, [esp + 0xa2a]
push ebx
push ecx
mov word [esp + 0xa30], bx
call fcn.00499a30
add esp, 0xc
lea edx, [esp + 0xa24]
push edx
push ebx
push ebx
push 0x2b
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp dword [0x4e8f68], edi
mov esi, eax
jne 0x41371b
call fcn.004722e0
cmp eax, 3
jg 0x41371b
cmp esi, ebx
je 0x41371b
push 3
push 0x5a
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_hr__S_OK.
mov byte [esp + 0xe4c], 5
mov edi, 8
or dword [esp + 0x14], edi
push eax
call fcn.004041d0
add esp, 8
jmp 0x413720
mov edi, 8
mov dword [esp + 0xe48], 2
test byte [esp + 0x10], 8
je 0x413743
and dword [esp + 0x10], 0xfffffff7
lea ecx, [esp + 0xe8]
call fcn.00472c30
lea ecx, [esp + 0x3a0]
call fcn.00475600
lea eax, [esp + 0x3a0]
push eax
push 0x66
mov byte [esp + 0xe50], 6
call fcn.00476de0
add esp, 8
push 0xc
mov esi, 7
push str.regsvr32.exe
lea ecx, [esp + 0xd4]
mov dword [esp + 0xec], esi
mov dword [esp + 0xe8], ebx
mov word [esp + 0xd8], bx
call fcn.00405680
lea ecx, [esp + 0xcc]
push ecx
lea edx, [esp + 0x3c0]
push edx
lea ecx, [esp + 0x3a8]
mov byte [esp + 0xe50], 7
call fcn.00476020
mov byte [esp + 0xe48], 9
cmp dword [esp + 0xe4], edi
jb 0x4137dc
mov eax, dword [esp + 0xd0]
push eax
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x368]
push ecx
lea ecx, [esp + 0x388]
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], ebx
mov word [esp + 0xd4], bx
call fcn.00475a60
mov byte [esp + 0xe48], 0xa
push 0xd
push str.Uninstall.xml
lea ecx, [esp + 0x31c]
mov dword [esp + 0x334], esi
mov dword [esp + 0x330], ebx
mov word [esp + 0x320], bx
call fcn.00405680
lea edx, [esp + 0x314]
push edx
lea eax, [esp + 0x2e0]
push eax
lea ecx, [esp + 0x38c]
mov byte [esp + 0xe50], 0xb
call fcn.00476020
push eax
lea ecx, [esp + 0x388]
mov byte [esp + 0xe4c], 0xc
call fcn.00475e00
lea ecx, [esp + 0x2dc]
mov byte [esp + 0xe48], 0xb
call fcn.00475620
mov byte [esp + 0xe48], 0xa
cmp dword [esp + 0x32c], edi
jb 0x4138a5
mov ecx, dword [esp + 0x318]
push ecx
call fcn.00495fd1
add esp, 4
lea edx, [esp + 0x384]
push edx
mov byte [esp + 0x22], bl
call fcn.00473b00
add esp, 4
test al, al
jne 0x413b6b
lea ecx, [esp + 0x48]
call fcn.0047b890
push 0x20019
push str.SoftwareTencentQQ2009
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x54]
mov byte [esp + 0xe54], 0xd
call fcn.0047bc30
cmp eax, ebx
je 0x41398c
lea ecx, [esp + 0x48]
mov byte [esp + 0xe48], 0xa
call fcn.0047bb30
lea ecx, [esp + 0x384]
mov byte [esp + 0xe48], 9
call fcn.00475620
lea ecx, [esp + 0x3bc]
mov byte [esp + 0xe48], 6
call fcn.00475620
lea ecx, [esp + 0x3a0]
mov byte [esp + 0xe48], 2
call fcn.00475620
cmp dword [esp + 0x364], 0x10
jb 0x413959
mov eax, dword [esp + 0x350]
push eax
call fcn.00495fd1
add esp, 4
cmp dword [esp + 0x380], edi
mov dword [esp + 0x364], 0xf
mov dword [esp + 0x360], ebx
mov byte [esp + 0x350], bl
jb 0x4158cf
mov ecx, dword [esp + 0x36c]
push ecx
jmp 0x4158c7
mov dword [esp + 0x348], esi
mov dword [esp + 0x344], ebx
mov word [esp + 0x334], bx
lea edx, [esp + 0x330]
push edx
push str.version
lea ecx, [esp + 0x50]
mov byte [esp + 0xe50], 0xe
call fcn.0047beb0
cmp eax, ebx
jne 0x413d5f
cmp dword [esp + 0x344], ebx
je 0x413d5f
mov dword [esp + 0x32c], esi
mov dword [esp + 0x328], ebx
mov word [esp + 0x318], bx
sub esp, 0x1c
mov byte [esp + 0xe64], 0xf
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0x4ca818
lea esi, [esp + 0x334]
call fcn.00402090
call fcn.00401be0
add esp, 0x1c
mov eax, esi
push eax
lea ecx, [esp + 0x2fc]
call fcn.00475a60
push str.Uninstall.xml
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe4c], 0x10
call fcn.00405140
push str.Uninstall
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe4c], 0x11
call fcn.00405140
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x8c]
push edx
lea ecx, [esp + 0x300]
mov byte [esp + 0xe50], 0x12
call fcn.00476020
lea ecx, [esp + 0x330]
push ecx
lea edx, [esp + 0xb4]
push edx
mov ecx, eax
mov byte [esp + 0xe50], 0x13
call fcn.00476020
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x2e0]
push edx
mov ecx, eax
mov byte [esp + 0xe50], 0x14
call fcn.00476020
lea ecx, [esp + 0xb0]
mov byte [esp + 0xe48], 0x16
call fcn.00475620
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x17
call fcn.00475620
lea ecx, [esp + 0x28]
call fcn.00402400
lea ecx, [esp + 0x68]
mov byte [esp + 0xe48], 0x19
call fcn.00402400
lea eax, [esp + 0x2dc]
push eax
call fcn.00473b00
add esp, 4
test al, al
lea ecx, [esp + 0x2dc]
je 0x413cbc
push ecx
lea ecx, [esp + 0x388]
call fcn.00475e00
lea ecx, [esp + 0x2dc]
mov byte [esp + 0x1e], 1
mov byte [esp + 0xe48], 0x10
call fcn.00475620
lea ecx, [esp + 0x2f8]
mov byte [esp + 0xe48], 0xf
call fcn.00475620
mov ecx, esi
call fcn.00402400
lea ecx, [esp + 0x330]
call fcn.00402400
lea ecx, [esp + 0x48]
mov byte [esp + 0xe48], 0xa
call fcn.0047bb30
lea eax, [esp + 0x17c]
call fcn.00459950
mov byte [esp + 0xe48], 0x1a
cmp dword [esp + 0x39c], edi
mov eax, dword [esp + 0x388]
jae 0x413b96
lea eax, [esp + 0x388]
push eax
lea eax, [esp + 0x180]
call fcn.00459d10
cmp dword [esp + 0x1ac], ebx
je 0x413d93
call fcn.004722e0
cmp eax, 2
jg 0x413c00
push 2
push 0x85
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
mov byte [esp + 0xe48], 0x1b
mov edx, dword [esp + 0x1ac]
or dword [esp + 0x10], 0x10
push edx
push ecx
add eax, 4
push str.ErrorID_
push eax
call fcn.004041d0
add esp, 0xc
mov ecx, eax
call fcn.00411010
mov dword [esp + 0xe48], 0x1a
test byte [esp + 0x10], 0x10
je 0x413c1e
lea ecx, [esp + 0xe8]
call fcn.00472c30
lea eax, [esp + 0x17c]
push eax
mov byte [esp + 0xe4c], 0xa
call fcn.00459a90
lea ecx, [esp + 0x384]
mov byte [esp + 0xe48], 9
call fcn.00475620
lea ecx, [esp + 0x3bc]
mov byte [esp + 0xe48], 6
call fcn.00475620
lea ecx, [esp + 0x3a0]
mov byte [esp + 0xe48], 2
call fcn.00475620
cmp dword [esp + 0x364], 0x10
jb 0x413c89
mov ecx, dword [esp + 0x350]
push ecx
call fcn.00495fd1
add esp, 4
cmp dword [esp + 0x380], edi
mov dword [esp + 0x364], 0xf
mov dword [esp + 0x360], ebx
mov byte [esp + 0x350], bl
jb 0x4158cf
mov edx, dword [esp + 0x36c]
push edx
jmp 0x4158c7
mov byte [esp + 0xe48], 0x10
call fcn.00475620
lea ecx, [esp + 0x2f8]
mov byte [esp + 0xe48], 0xf
call fcn.00475620
lea ecx, [esp + 0x314]
call fcn.00402400
lea ecx, [esp + 0x330]
call fcn.00402400
lea ecx, [esp + 0x48]
mov byte [esp + 0xe48], 0xa
call fcn.0047bb30
lea ecx, [esp + 0x384]
mov byte [esp + 0xe48], 9
call fcn.00475620
lea ecx, [esp + 0x3bc]
mov byte [esp + 0xe48], 6
call fcn.00475620
lea ecx, [esp + 0x3a0]
mov byte [esp + 0xe48], 2
call fcn.00475620
lea ecx, [esp + 0x34c]
call fcn.004020d0
lea ecx, [esp + 0x368]
call fcn.00402400
jmp 0x4158cf
cmp dword [esp + 0x348], edi
jb 0x413d78
mov edx, dword [esp + 0x334]
push edx
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x348], esi
mov dword [esp + 0x344], ebx
mov word [esp + 0x334], bx
jmp 0x4138f2
push 0x4ca72c
lea eax, [esp + 0x180]
call fcn.00458a90
mov edi, eax
push 0x4ca738
mov dword [esp + 0x4c], edi
call fcn.00458a90
push 0x4ca768
call fcn.00459390
cmp eax, ebx
jne 0x413dc6
xor esi, esi
jmp 0x413dd1
add eax, 0x10
push eax
call fcn.004582b0
mov esi, eax
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
push esi
lea ecx, [esp + 0x2e0]
mov byte [esp + 0xe4c], 0x1c
call fcn.00402090
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x2e0]
push 0x2e
push ecx
mov byte [esp + 0xe54], 0x1d
call fcn.0047cd20
add esp, 0xc
mov byte [esp + 0xe48], 0x1c
cmp dword [esp + 0x2f4], 0x10
jb 0x413e33
mov edx, dword [esp + 0x2e0]
push edx
call fcn.00495fd1
add esp, 4
mov eax, dword [esp + 0x5c]
cmp eax, ebx
je 0x413f2d
mov ecx, dword [esp + 0x60]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jne 0x413f2d
push ebx
lea ecx, [esp + 0x5c]
call fcn.00415930
push eax
lea ecx, [esp + 0x24]
call fcn.004015c0
lea eax, [esp + 0xac]
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.0047aff0
add esp, 8
push 1
lea ecx, [esp + 0x5c]
call fcn.00415930
push eax
lea ecx, [esp + 0x24]
call fcn.004015c0
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x24]
push eax
call fcn.0047aff0
add esp, 8
cmp dword [esp + 0xac], 1
jne 0x413ecb
cmp dword [esp + 0xa8], ebx
je 0x413f90
call fcn.004722e0
test eax, eax
jg 0x413f14
push ebx
push 0x96
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
push esi
push ecx
add eax, 4
push str.version_num_
mov byte [esp + 0xe54], 0x1e
or dword [esp + 0x1c], 0x20
push eax
call fcn.004041d0
add esp, 0xc
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test byte [esp + 0x10], 0x20
je 0x413f90
and dword [esp + 0x10], 0xffffffdf
jmp 0x413f84
call fcn.004722e0
cmp eax, 2
jg 0x413f6d
push 2
push 0x9b
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.version_num_invalid
mov byte [esp + 0xe4c], 0x1f
or dword [esp + 0x14], 0x40
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test byte [esp + 0x10], 0x40
je 0x413f90
and dword [esp + 0x10], 0xffffffbf
lea ecx, [esp + 0xe8]
call fcn.00472c30
push 0x4ca760
mov eax, edi
call fcn.00458a90
push 0x4ca7a8
call fcn.00458a90
cmp eax, ebx
mov dword [esp + 0x18], eax
je 0x414902
mov eax, dword [esp + 0x18]
push 0x4ca7a0
call fcn.00459390
cmp eax, ebx
jne 0x413fc8
xor esi, esi
jmp 0x413fd3
add eax, 0x10
push eax
call fcn.004582b0
mov esi, eax
cmp dword [0x4e8f68], 1
jne 0x414023
call fcn.004722e0
cmp eax, 3
jg 0x414023
cmp esi, ebx
jne 0x414023
push 3
push 0xa7
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_type.
mov byte [esp + 0xe4c], 0x20
or dword [esp + 0x14], 0x80
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test byte [esp + 0x10], 0x80
je 0x414049
and dword [esp + 0x10], 0xffffff7f
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov edi, 0x4ca7c0
mov eax, esi
mov cl, byte [eax]
cmp cl, byte [edi]
jne 0x414070
cmp cl, bl
je 0x41406c
mov cl, byte [eax + 1]
cmp cl, byte [edi + 1]
jne 0x414070
add eax, 2
add edi, 2
cmp cl, bl
jne 0x414050
xor eax, eax
jmp 0x414075
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4144f7
mov eax, dword [esp + 0x18]
push 0x4ca774
call fcn.00459390
cmp eax, ebx
jne 0x414093
xor esi, esi
jmp 0x41409e
add eax, 0x10
push eax
call fcn.004582b0
mov esi, eax
cmp dword [0x4e8f68], 1
jne 0x4140ee
call fcn.004722e0
cmp eax, 3
jg 0x4140ee
cmp esi, ebx
jne 0x4140ee
push 3
push 0xab
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_path.
mov byte [esp + 0xe4c], 0x21
or dword [esp + 0x14], 0x100
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test dword [esp + 0x10], 0x100
je 0x414117
and dword [esp + 0x10], 0xfffffeff
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov edi, 0xf
mov dword [esp + 0x310], edi
mov dword [esp + 0x30c], ebx
mov byte [esp + 0x2fc], bl
mov byte [esp + 0xe48], 0x22
push 0xc
push 0x4ca7d4
lea ecx, [esp + 0x30]
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebx
mov byte [esp + 0x34], bl
call fcn.00402d90
mov byte [esp + 0xe48], 0x23
mov eax, esi
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
lea edi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x414171
sub eax, edi
push eax
push esi
lea ecx, [esp + 0x70]
call fcn.00402d90
lea ecx, [esp + 0x368]
push ecx
lea edx, [esp + 0x2e0]
push edx
mov byte [esp + 0xe50], 0x24
call fcn.00473880
lea ecx, [esp + 0x300]
push ecx
push eax
lea edx, [esp + 0x78]
push edx
lea edi, [esp + 0x3c]
mov byte [esp + 0xe5c], 0x25
call fcn.004133b0
add esp, 0x14
cmp dword [esp + 0x2f4], 0x10
jb 0x4141e0
mov eax, dword [esp + 0x2e0]
push eax
call fcn.00495fd1
add esp, 4
mov edi, 0x10
cmp dword [esp + 0x80], edi
mov esi, 0xf
mov dword [esp + 0x2f4], esi
mov dword [esp + 0x2f0], ebx
mov byte [esp + 0x2e0], bl
jb 0x414215
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00495fd1
add esp, 4
cmp dword [esp + 0x40], edi
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
jb 0x414237
mov edx, dword [esp + 0x2c]
push edx
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x32c], esi
mov dword [esp + 0x328], ebx
mov byte [esp + 0x318], bl
mov byte [esp + 0xe48], 0x26
lea eax, [esp + 0xa24]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x414270
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xa28]
push eax
lea ecx, [esp + 0x30]
call fcn.00405680
mov byte [esp + 0xe48], 0x27
push 8
push 0x4ca7c8
lea ecx, [esp + 0x70]
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.00402d90
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x2e0]
push edx
mov byte [esp + 0xe50], 0x28
call fcn.00473880
lea ecx, [esp + 0x31c]
push ecx
push eax
lea edx, [esp + 0x308]
push edx
lea edi, [esp + 0x7c]
mov byte [esp + 0xe5c], 0x29
call fcn.004133b0
add esp, 0x14
cmp dword [esp + 0x2f4], 0x10
jb 0x414314
mov eax, dword [esp + 0x2e0]
push eax
call fcn.00495fd1
add esp, 4
mov edi, 0x10
cmp dword [esp + 0x80], edi
mov dword [esp + 0x2f4], esi
mov dword [esp + 0x2f0], ebx
mov byte [esp + 0x2e0], bl
jb 0x414344
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00495fd1
add esp, 4
mov byte [esp + 0xe48], 0x26
cmp dword [esp + 0x40], 8
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
jb 0x41436f
mov edx, dword [esp + 0x2c]
push edx
call fcn.00495fd1
add esp, 4
lea eax, [esp + 0x3bc]
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xb4], bl
mov byte [esp + 0xb6], bl
mov dword [esp + 0xb8], ebx
mov byte [esp + 0xbc], bl
mov dword [esp + 0xc0], ebx
mov byte [esp + 0xb5], 1
call fcn.00471900
mov byte [esp + 0xe48], 0x2a
push 2
push 0x4cc478
lea ecx, [esp + 0x30]
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebx
mov byte [esp + 0x34], bl
call fcn.00402d90
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4c], 0x2b
call fcn.00472000
mov byte [esp + 0xe48], 0x2a
cmp dword [esp + 0x40], edi
jb 0x414406
mov edx, dword [esp + 0x2c]
push edx
call fcn.00495fd1
add esp, 4
push 2
push 0x4cc768
lea ecx, [esp + 0x30]
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebx
mov byte [esp + 0x34], bl
call fcn.00402d90
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4c], 0x2c
call fcn.00472000
mov byte [esp + 0xe48], 0x2a
cmp dword [esp + 0x40], edi
jb 0x414456
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00495fd1
add esp, 4
lea edx, [esp + 0x314]
push edx
lea ecx, [esp + 0x8c]
call fcn.00472000
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0xb4]
push ecx
lea edx, [esp + 0x90]
push edx
mov dword [esp + 0x50], ebx
call fcn.0047a9f0
add esp, 0xc
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x26
call fcn.00471770
cmp dword [esp + 0x32c], edi
jb 0x4144b8
mov eax, dword [esp + 0x318]
push eax
call fcn.00495fd1
add esp, 4
mov byte [esp + 0xe48], 0x1c
cmp dword [esp + 0x310], edi
mov dword [esp + 0x32c], esi
mov dword [esp + 0x328], ebx
mov byte [esp + 0x318], bl
jb 0x4148d4
mov ecx, dword [esp + 0x2fc]
push ecx
call fcn.00495fd1
add esp, 4
jmp 0x4148d4
mov edi, 0x4ca7c4
mov eax, esi
mov edi, edi
mov cl, byte [eax]
cmp cl, byte [edi]
jne 0x414520
cmp cl, bl
je 0x41451c
mov cl, byte [eax + 1]
cmp cl, byte [edi + 1]
jne 0x414520
add eax, 2
add edi, 2
cmp cl, bl
jne 0x414500
xor eax, eax
jmp 0x414525
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4148d4
mov eax, dword [esp + 0x18]
push 0x4ca774
call fcn.00459390
cmp eax, ebx
jne 0x414543
xor edi, edi
jmp 0x41454e
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x41459e
call fcn.004722e0
cmp eax, 3
jg 0x41459e
cmp edi, ebx
jne 0x41459e
push 3
push 0xc1
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_path.
mov byte [esp + 0xe4c], 0x2d
or dword [esp + 0x14], 0x200
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test dword [esp + 0x10], 0x200
je 0x4145c7
and dword [esp + 0x10], 0xfffffdff
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov esi, 0xf
mov dword [esp + 0x310], esi
mov dword [esp + 0x30c], ebx
mov byte [esp + 0x2fc], bl
push 0x4ca7d4
lea ecx, [esp + 0x318]
mov byte [esp + 0xe4c], 0x2e
call fcn.00402090
push edi
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe4c], 0x2f
call fcn.00402090
lea edx, [esp + 0x368]
push edx
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0xe50], 0x30
call fcn.00473880
lea ecx, [esp + 0x300]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
lea edi, [esp + 0x328]
mov byte [esp + 0xe5c], 0x31
call fcn.004133b0
add esp, 0x14
lea ecx, [esp + 0x88]
call fcn.004020d0
lea ecx, [esp + 0x28]
call fcn.004020d0
mov ecx, edi
call fcn.004020d0
mov dword [esp + 0x2f4], esi
mov dword [esp + 0x2f0], ebx
mov byte [esp + 0x2e0], bl
lea eax, [esp + 0xa24]
push eax
lea ecx, [esp + 0x318]
mov byte [esp + 0xe4c], 0x32
call fcn.00405140
push 0x4ca7c8
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe4c], 0x33
call fcn.00402090
lea ecx, [esp + 0x314]
push ecx
lea edx, [esp + 0x8c]
push edx
mov byte [esp + 0xe50], 0x34
call fcn.00473880
lea ecx, [esp + 0x2e4]
push ecx
push eax
lea edx, [esp + 0x308]
push edx
lea edi, [esp + 0x3c]
mov byte [esp + 0xe5c], 0x35
call fcn.004133b0
add esp, 0x14
lea ecx, [esp + 0x88]
call fcn.004020d0
mov ecx, edi
call fcn.004020d0
lea ecx, [esp + 0x314]
mov byte [esp + 0xe48], 0x32
call fcn.00402400
mov eax, dword [esp + 0x18]
push str.uninstall_arg
call fcn.00459390
cmp eax, ebx
jne 0x414730
xor esi, esi
jmp 0x41473b
add eax, 0x10
push eax
call fcn.004582b0
mov esi, eax
cmp dword [0x4e8f68], 1
jne 0x41478b
call fcn.004722e0
cmp eax, 3
jg 0x41478b
cmp esi, ebx
jne 0x41478b
push 3
push 0xc9
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_arg.
mov byte [esp + 0xe4c], 0x36
or dword [esp + 0x14], 0x400
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x32
test dword [esp + 0x10], 0x400
je 0x4147b4
and dword [esp + 0x10], 0xfffffbff
lea ecx, [esp + 0xe8]
call fcn.00472c30
lea eax, [esp + 0x2dc]
push eax
lea ecx, [esp + 0x24]
call fcn.004015c0
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x318]
push edx
call fcn.004738d0
add esp, 8
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4c], 0x37
call fcn.00475a60
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe4c], 0x38
call fcn.00471900
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x3a
call fcn.00475620
lea ecx, [esp + 0x314]
mov byte [esp + 0xe48], 0x3b
call fcn.00402400
push esi
lea ecx, [esp + 0x2c]
call fcn.00402090
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe4c], 0x3c
call fcn.00472000
lea ecx, [esp + 0x28]
mov byte [esp + 0xe48], 0x3b
call fcn.004020d0
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x334]
push edx
lea eax, [esp + 0x70]
push eax
mov byte [esp + 0x33c], bl
mov byte [esp + 0x33e], bl
mov dword [esp + 0x340], ebx
mov byte [esp + 0x344], bl
mov dword [esp + 0x348], ebx
mov byte [esp + 0x33d], 1
mov dword [esp + 0x5c], ebx
call fcn.0047a9f0
add esp, 0xc
lea ecx, [esp + 0x68]
mov byte [esp + 0xe48], 0x32
call fcn.00471770
lea ecx, [esp + 0x2dc]
call fcn.004020d0
lea ecx, [esp + 0x2f8]
mov byte [esp + 0xe48], 0x1c
call fcn.004020d0
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0x24]
cmp edi, ebx
je 0x4148f4
nop
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
test eax, eax
jne 0x41493c
mov edi, dword [edi + 0x24]
cmp edi, ebx
jne 0x4148e0
xor eax, eax
cmp eax, ebx
mov dword [esp + 0x18], eax
jne 0x413fb2
mov eax, dword [esp + 0x48]
push 0x4ca754
call fcn.00458a90
push 0x4ca77c
call fcn.00458a90
cmp eax, ebx
mov dword [esp + 0x18], eax
je 0x414e98
mov ecx, eax
push 0x4ca788
mov eax, ecx
call fcn.00459390
cmp eax, ebx
jne 0x414947
xor edi, edi
jmp 0x414952
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
jmp 0x4148f6
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x4149a2
call fcn.004722e0
cmp eax, 3
jg 0x4149a2
cmp edi, ebx
jne 0x4149a2
push 3
push 0xe7
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_root_key.
mov byte [esp + 0xe4c], 0x3d
or dword [esp + 0x14], 0x800
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test dword [esp + 0x10], 0x800
je 0x4149cb
and dword [esp + 0x10], 0xfffff7ff
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov eax, dword [str.HKCR]
push edi
call fcn.00413350
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [esp + 0x44], eax
jne 0x414a76
mov eax, dword [str.HKEY_CLASSES_ROOT]
push edi
call fcn.00413350
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [esp + 0x44], esi
jne 0x414a76
cmp dword [0x4e8f68], 1
jne 0x414a4d
call fcn.004722e0
cmp eax, 3
jg 0x414a4d
push 3
push 0xee
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_false.
mov byte [esp + 0xe4c], 0x3e
or dword [esp + 0x14], 0x1000
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test dword [esp + 0x10], 0x1000
je 0x414a76
and dword [esp + 0x10], 0xffffefff
lea ecx, [esp + 0xe8]
call fcn.00472c30
mov eax, dword [esp + 0x18]
push 0x4ca790
call fcn.00459390
cmp eax, ebx
jne 0x414a8c
xor edi, edi
jmp 0x414a97
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x414ae7
call fcn.004722e0
cmp eax, 3
jg 0x414ae7
cmp edi, ebx
jne 0x414ae7
push 3
push 0xf2
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_sub_key.
mov byte [esp + 0xe4c], 0x3f
or dword [esp + 0x14], 0x2000
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x1c
test dword [esp + 0x10], 0x2000
je 0x414b10
and dword [esp + 0x10], 0xffffdfff
lea ecx, [esp + 0xe8]
call fcn.00472c30
cmp edi, ebx
mov dword [esp + 0xb0], edi
jne 0x414b24
mov dword [esp + 0xb4], ebx
jmp 0x414b42
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x414b30
sub eax, edx
mov dword [esp + 0xb4], eax
lea ecx, [esp + 0xb0]
push ecx
lea edx, [esp + 0x334]
push edx
call fcn.004738d0
add esp, 8
lea ecx, [esp + 0x50]
mov byte [esp + 0xe48], 0x40
call fcn.0047b890
mov byte [esp + 0xe48], 0x41
mov eax, dword [esp + 0x334]
mov edi, 8
cmp dword [esp + 0x348], edi
jae 0x414b8f
lea eax, [esp + 0x334]
push 2
push eax
mov eax, dword [esi*4 + 0x4e6bf0]
push eax
lea ecx, [esp + 0x5c]
call fcn.0047bc30
test eax, eax
je 0x414bda
lea ecx, [esp + 0x50]
mov byte [esp + 0xe48], 0x40
call fcn.0047bb30
mov byte [esp + 0xe48], 0x1c
cmp dword [esp + 0x348], edi
jb 0x414e69
mov ecx, dword [esp + 0x334]
push ecx
jmp 0x414e61
mov eax, dword [esp + 0x18]
push 0x4ca780
call fcn.00458a90
mov esi, eax
cmp esi, ebx
je 0x414d58
push 0x4ca798
mov eax, esi
call fcn.00459390
cmp eax, ebx
jne 0x414c06
xor edi, edi
jmp 0x414c11
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x414c61
call fcn.004722e0
cmp eax, 3
jg 0x414c61
cmp edi, ebx
jne 0x414c61
push 3
push 0x100
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_name.
mov byte [esp + 0xe4c], 0x42
or dword [esp + 0x14], 0x4000
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x41
test dword [esp + 0x10], 0x4000
je 0x414c8a
and dword [esp + 0x10], 0xffffbfff
lea ecx, [esp + 0xe8]
call fcn.00472c30
cmp edi, ebx
mov dword [esp + 0x20], edi
jne 0x414c98
mov dword [esp + 0x24], ebx
jmp 0x414caf
mov eax, edi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x414ca0
sub eax, edx
mov dword [esp + 0x24], eax
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x318]
push eax
call fcn.004738d0
add esp, 8
push 1
mov byte [esp + 0xe4c], 0x43
mov ecx, dword [esp + 0x32c]
push 0x4cc384
push ecx
push ebx
lea ecx, [esp + 0x324]
call fcn.00411610
test eax, eax
jne 0x414cfe
push ebx
push 0x4cadec
lea ecx, [esp + 0x31c]
call fcn.00405680
mov eax, dword [esp + 0x318]
mov edi, 8
cmp dword [esp + 0x32c], edi
jae 0x414d1a
lea eax, [esp + 0x318]
push eax
lea ecx, [esp + 0x54]
call fcn.0047bdd0
mov byte [esp + 0xe48], 0x41
cmp dword [esp + 0x32c], edi
jb 0x414d45
mov edx, dword [esp + 0x318]
push edx
call fcn.00495fd1
add esp, 4
xor edi, edi
mov eax, esi
call fcn.00458af0
mov esi, eax
cmp esi, ebx
jne 0x414bf2
mov eax, dword [esp + 0x334]
mov edi, 8
cmp dword [esp + 0x348], edi
jae 0x414d74
lea eax, [esp + 0x334]
mov esi, dword [esp + 0x44]
push eax
mov eax, dword [esi*4 + 0x4e6bf0]
push eax
lea ecx, [esp + 0x60c]
call fcn.0047ba30
mov byte [esp + 0xe48], 0x44
cmp dword [esp + 0x348], edi
mov eax, dword [esp + 0x334]
jae 0x414dac
lea eax, [esp + 0x334]
mov ecx, dword [esi*4 + 0x4e6bf0]
push eax
push ecx
lea ecx, [esp + 0x3fc]
call fcn.0047bab0
lea ecx, [esp + 0x604]
mov byte [esp + 0xe48], 0x45
call fcn.0047b8d0
test eax, eax
jne 0x414e0f
lea ecx, [esp + 0x3f4]
call fcn.0047b9a0
test eax, eax
jne 0x414e0f
cmp dword [esp + 0x348], edi
mov eax, dword [esp + 0x334]
jae 0x414e00
lea eax, [esp + 0x334]
mov edx, dword [esi*4 + 0x4e6bf0]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
lea ecx, [esp + 0x3f4]
mov byte [esp + 0xe48], 0x44
call fcn.0047b990
lea ecx, [esp + 0x604]
mov byte [esp + 0xe48], 0x41
call fcn.0047b990
lea ecx, [esp + 0x50]
mov byte [esp + 0xe48], 0x40
call fcn.0047bb30
mov byte [esp + 0xe48], 0x1c
cmp dword [esp + 0x348], edi
jb 0x414e69
mov eax, dword [esp + 0x334]
push eax
call fcn.00495fd1
add esp, 4
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0x24]
cmp edi, ebx
je 0x414e88
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
test eax, eax
jne 0x414ee0
mov edi, dword [edi + 0x24]
cmp edi, ebx
jne 0x414e74
xor eax, eax
cmp eax, ebx
mov ecx, eax
mov dword [esp + 0x18], ecx
jne 0x414928
lea ecx, [esp + 0x18]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x15
mov esi, 0xf
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x4ca828
mov edi, 8
mov dword [esp + 0x40], ebx
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401db0
add esp, 0x20
cmp al, bl
je 0x414eeb
cmp dword [esp + 0x18], ebx
setne byte [esp + 0x17]
jmp 0x414ef0
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
jmp 0x414e8a
mov byte [esp + 0x17], 1
lea edx, [esp + 0x18]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x19
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x4ca840
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401db0
add esp, 0x20
cmp al, bl
je 0x414f2a
cmp dword [esp + 0x18], ebx
setne byte [esp + 0x1f]
jmp 0x414f2f
mov byte [esp + 0x1f], 1
cmp byte [esp + 0x17], bl
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
jne 0x415082
push 0x206
lea eax, [esp + 0x3fa]
push ebx
push eax
mov word [esp + 0x400], bx
call fcn.00499a30
add esp, 0xc
push 1
push 0x19
lea ecx, [esp + 0x3fc]
push ecx
push ebx
call esi
test eax, eax
je 0x415082
push 0x4cb47c
lea ecx, [esp + 0x2c]
call fcn.00405140
lea edx, [esp + 0x3f4]
push edx
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xe4c], 0x46
call fcn.00405140
lea eax, [esp + 0x2f8]
push eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4c], 0x47
call fcn.00475a60
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x2e0]
push edx
mov ecx, eax
mov byte [esp + 0xe50], 0x48
call fcn.00476020
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x4a
call fcn.00475620
cmp dword [esp + 0x310], edi
jb 0x415003
mov eax, dword [esp + 0x2fc]
push eax
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x310], 7
mov dword [esp + 0x30c], ebx
mov word [esp + 0x2fc], bx
mov byte [esp + 0xe48], 0x4c
cmp dword [esp + 0x40], edi
jb 0x415038
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00495fd1
add esp, 4
lea edx, [esp + 0x2dc]
push edx
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], bx
call fcn.00473b00
add esp, 4
test al, al
je 0x41506e
lea eax, [esp + 0x2dc]
push ebx
push eax
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x2dc]
mov byte [esp + 0xe48], 0x1c
call fcn.00475620
cmp byte [esp + 0x1f], bl
jne 0x415248
push 0x206
lea ecx, [esp + 0x3fa]
push ebx
push ecx
mov word [esp + 0x400], bx
call fcn.00499a30
add esp, 0xc
push 1
push 0x1a
lea edx, [esp + 0x3fc]
push edx
push ebx
call esi
test eax, eax
je 0x415248
push 0x4cb47c
lea ecx, [esp + 0x318]
call fcn.00405140
push str.MicrosoftInternet_ExplorerQuick_Launch
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe4c], 0x4d
call fcn.00405140
lea eax, [esp + 0x3f4]
push eax
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xe4c], 0x4e
call fcn.00405140
lea ecx, [esp + 0x2f8]
push ecx
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe4c], 0x4f
call fcn.00475a60
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x8c]
push ecx
mov ecx, eax
mov byte [esp + 0xe50], 0x50
call fcn.00476020
lea edx, [esp + 0x314]
push edx
lea ecx, [esp + 0x2e0]
push ecx
mov ecx, eax
mov byte [esp + 0xe50], 0x51
call fcn.00476020
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x53
call fcn.00475620
lea ecx, [esp + 0x68]
mov byte [esp + 0xe48], 0x54
call fcn.00475620
cmp dword [esp + 0x310], edi
jb 0x415196
mov edx, dword [esp + 0x2fc]
push edx
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x310], 7
mov dword [esp + 0x30c], ebx
mov word [esp + 0x2fc], bx
cmp dword [esp + 0x40], edi
jb 0x4151c3
mov eax, dword [esp + 0x2c]
push eax
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
mov byte [esp + 0xe48], 0x57
cmp dword [esp + 0x32c], edi
jb 0x4151f5
mov ecx, dword [esp + 0x318]
push ecx
call fcn.00495fd1
add esp, 4
lea edx, [esp + 0x2dc]
push edx
mov dword [esp + 0x330], 7
mov dword [esp + 0x32c], ebx
mov word [esp + 0x31c], bx
call fcn.00473b00
add esp, 4
test al, al
je 0x415234
lea eax, [esp + 0x2dc]
push ebx
push eax
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x2dc]
mov byte [esp + 0xe48], 0x1c
call fcn.00475620
push 0x206
lea ecx, [esp + 0xc32]
push ebx
push ecx
mov word [esp + 0xc38], bx
call fcn.00499a30
add esp, 0xc
push 1
push 0x17
lea edx, [esp + 0xc34]
push edx
push ebx
call esi
test eax, eax
je 0x41538b
push 0x4cc76c
lea ecx, [esp + 0x2c]
call fcn.00405140
lea eax, [esp + 0xc2c]
push eax
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xe4c], 0x58
call fcn.00405140
lea ecx, [esp + 0x2f8]
push ecx
lea ecx, [esp + 0x8c]
mov byte [esp + 0xe4c], 0x59
call fcn.00475a60
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x2e0]
push ecx
mov ecx, eax
mov byte [esp + 0xe50], 0x5a
call fcn.00476020
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x5c
call fcn.00475620
cmp dword [esp + 0x310], edi
jb 0x41530c
mov edx, dword [esp + 0x2fc]
push edx
call fcn.00495fd1
add esp, 4
mov esi, 7
mov dword [esp + 0x310], esi
mov dword [esp + 0x30c], ebx
mov word [esp + 0x2fc], bx
mov byte [esp + 0xe48], 0x5e
cmp dword [esp + 0x40], edi
jb 0x415342
mov eax, dword [esp + 0x2c]
push eax
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x2dc]
push ecx
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], bx
call fcn.00473b00
add esp, 4
test al, al
je 0x415375
lea edx, [esp + 0x2dc]
push 1
push edx
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x2dc]
mov byte [esp + 0xe48], 0x1c
call fcn.00475620
jmp 0x415390
mov esi, 7
push ebx
push ebx
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea ecx, [esp + 0x3d8]
call fcn.00475600
lea eax, [esp + 0x3d8]
push eax
push 0x6c
mov byte [esp + 0xe50], 0x5f
call fcn.00476de0
add esp, 8
push 0x14
push str.TencentQQ_rdo.cache
lea ecx, [esp + 0x300]
mov dword [esp + 0x318], esi
mov dword [esp + 0x314], ebx
mov word [esp + 0x304], bx
call fcn.00405680
lea ecx, [esp + 0x2f8]
push ecx
lea edx, [esp + 0x8c]
push edx
lea ecx, [esp + 0x3e0]
mov byte [esp + 0xe50], 0x60
call fcn.00476020
push ebx
push eax
mov byte [esp + 0xe50], 0x61
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x88]
mov byte [esp + 0xe48], 0x60
call fcn.00475620
mov byte [esp + 0xe48], 0x5f
cmp dword [esp + 0x310], edi
jb 0x41545c
mov eax, dword [esp + 0x2fc]
push eax
call fcn.00495fd1
add esp, 4
mov eax, dword [esp + 0x48]
push 0x4ca740
call fcn.00458a90
mov edi, eax
mov esi, str.ck_WxS
mov dword [esp + 0x18], edi
call fcn.0044c540
mov eax, dword [0x4ee030]
cmp eax, ebx
mov dword [0x4ee074], 7
je 0x41549b
push ebx
push ebx
push 0x464
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
push 0x4ca748
mov eax, edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
call fcn.00458a90
cmp eax, ebx
je 0x4154ca
mov edi, 0x4ca748
add esi, 1
call fcn.00458af0
cmp eax, ebx
jne 0x4154b5
mov dword [esp + 0x48], esi
mov eax, dword [esp + 0x18]
push 0x4ca748
call fcn.00458a90
mov esi, eax
cmp esi, ebx
je 0x415656
push 0x4ca774
mov eax, esi
call fcn.00459390
cmp eax, ebx
jne 0x4154f6
xor edi, edi
jmp 0x415501
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x415551
call fcn.004722e0
cmp eax, 3
jg 0x415551
cmp edi, ebx
jne 0x415551
push 3
push 0x18a
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_path_name.
mov byte [esp + 0xe4c], 0x62
or dword [esp + 0x14], 0x8000
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x5f
test dword [esp + 0x10], 0x8000
je 0x41557a
and dword [esp + 0x10], 0xffff7fff
lea ecx, [esp + 0xe8]
call fcn.00472c30
cmp edi, ebx
mov dword [esp + 0x20], edi
jne 0x415588
mov dword [esp + 0x24], ebx
jmp 0x41559f
mov eax, edi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x415590
sub eax, edx
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x2e0]
push edx
call fcn.004738d0
add esp, 8
push eax
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xe4c], 0x63
call fcn.00475a60
mov byte [esp + 0xe48], 0x65
cmp dword [esp + 0x2f4], 8
jb 0x4155eb
mov eax, dword [esp + 0x2e0]
push eax
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x2f8]
push ebx
push ecx
mov dword [esp + 0x2fc], 7
mov dword [esp + 0x2f8], ebx
mov word [esp + 0x2e8], bx
call fcn.00474930
mov edi, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
push edi
push edx
call fcn.0044c3b0
add edi, 1
add esp, 0x10
lea ecx, [esp + 0x2f8]
mov dword [esp + 0x44], edi
mov byte [esp + 0xe48], 0x5f
call fcn.00475620
mov edi, 0x4ca748
mov eax, esi
call fcn.00458af0
mov esi, eax
cmp esi, ebx
jne 0x4154e2
mov eax, dword [esp + 0x18]
push 0x4ca750
call fcn.00458a90
mov esi, eax
cmp esi, ebx
je 0x4157d0
mov edi, edi
push 0x4ca774
mov eax, esi
call fcn.00459390
cmp eax, ebx
jne 0x415684
xor edi, edi
jmp 0x41568f
add eax, 0x10
push eax
call fcn.004582b0
mov edi, eax
cmp dword [0x4e8f68], 1
jne 0x4156df
call fcn.004722e0
cmp eax, 3
jg 0x4156df
cmp edi, ebx
jne 0x4156df
push 3
push 0x1a3
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetupuninstalldelete_files.cpp
lea ecx, [esp + 0xf4]
call fcn.00473160
add eax, 4
push str.Check_failed:_path_name.
mov byte [esp + 0xe4c], 0x66
or dword [esp + 0x14], 0x10000
push eax
call fcn.004041d0
add esp, 8
mov dword [esp + 0xe48], 0x5f
test dword [esp + 0x10], 0x10000
je 0x415708
and dword [esp + 0x10], 0xfffeffff
lea ecx, [esp + 0xe8]
call fcn.00472c30
cmp edi, ebx
mov dword [esp + 0x20], edi
jne 0x415716
mov dword [esp + 0x24], ebx
jmp 0x41572f
mov eax, edi
lea edx, [eax + 1]
jmp 0x415720
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x415720
sub eax, edx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x2e0]
push ecx
call fcn.004738d0
add esp, 8
push eax
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xe4c], 0x67
call fcn.00475a60
mov byte [esp + 0xe48], 0x69
cmp dword [esp + 0x2f4], 8
jb 0x41577b
mov edx, dword [esp + 0x2e0]
push edx
call fcn.00495fd1
add esp, 4
lea eax, [esp + 0x2f8]
push ebx
push eax
mov dword [esp + 0x2fc], 7
mov dword [esp + 0x2f8], ebx
mov word [esp + 0x2e8], bx
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x2f8]
mov byte [esp + 0xe48], 0x5f
call fcn.00475620
mov edi, 0x4ca750
mov eax, esi
call fcn.00458af0
mov esi, eax
cmp esi, ebx
jne 0x415670
cmp byte [esp + 0x1e], bl
jne 0x4157e7
lea ecx, [esp + 0x384]
push ebx
push ecx
call fcn.00474930
add esp, 8
lea ecx, [esp + 0x3d8]
mov byte [esp + 0xe48], 0x1c
call fcn.00475620
mov eax, dword [esp + 0x5c]
cmp eax, ebx
je 0x415825
mov edx, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0x64]
lea ecx, [esp + 0x5c]
push ecx
push edx
push eax
call fcn.0040bd10
mov eax, dword [esp + 0x6c]
push eax
call fcn.00495fd1
add esp, 0x14
lea ecx, [esp + 0x17c]
push ecx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov byte [esp + 0xe4c], 0xa
call fcn.00459a90
lea ecx, [esp + 0x384]
mov byte [esp + 0xe48], 9
call fcn.00475620
lea ecx, [esp + 0x3bc]
mov byte [esp + 0xe48], 6
call fcn.00475620
lea ecx, [esp + 0x3a0]
mov byte [esp + 0xe48], 2
call fcn.00475620
cmp dword [esp + 0x364], 0x10
jb 0x41589c
mov edx, dword [esp + 0x350]
push edx
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x364], 0xf
cmp dword [esp + 0x380], 8
mov byte [esp + 0x350], bl
mov dword [esp + 0x360], ebx
jb 0x4158cf
mov eax, dword [esp + 0x36c]
push eax
call fcn.00495fd1
add esp, 4
mov ecx, dword [esp + 0xe40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe28]
xor ecx, esp
call fcn.00495cb8
mov esp, ebp
pop ebp
ret 4