Function at 0x42a9a0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4bd3b4
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
mov eax, dword [0x4e44b4]
xor eax, esp
mov dword [esp + 0x1a8], eax
push ebx
push esi
push edi
mov eax, dword [0x4e44b4]
xor eax, esp
push eax
lea eax, [esp + 0x1c0]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x20], ebx
mov eax, 0xf
mov dword [esp + 0x160], eax
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
lea ecx, [esp + 0x148]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
mov dword [esp + 0x1e8], ebx
push eax
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x14], ebx
push str.NeedStartRunExe
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401a70
mov edx, dword [esp + 0x17c]
add esp, 0x20
push 4
push str.true
push edx
push ebx
lea ecx, [esp + 0x158]
call fcn.004060e0
test eax, eax
jne 0x42ae1b
lea ecx, [esp + 0x18]
call fcn.0047b890
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push closesocket
lea ecx, [esp + 0x24]
mov byte [esp + 0x1d4], 1
call fcn.0047bc30
cmp eax, ebx
je 0x42aab0
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c8], bl
call fcn.0047bb30
cmp dword [esp + 0x160], 0x10
jb 0x42af2c
mov eax, dword [esp + 0x14c]
push eax
jmp 0x42af24
mov edi, 7
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov word [esp + 0x168], bx
lea ecx, [esp + 0x164]
push ecx
push str.QQ2009
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 2
call fcn.0047beb0
mov dword [esp + 0x198], edi
mov dword [esp + 0x194], ebx
mov word [esp + 0x184], bx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
mov byte [esp + 0x1e4], 3
push 0xb
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push 0x4c9d1c
lea esi, [esp + 0x1a4]
mov byte [ecx + 4], bl
call fcn.00402d90
call fcn.00401be0
mov esi, 1
add esp, 0x1c
cmp dword [0x4e8f68], esi
mov byte [esp + 0x17], al
jne 0x42ab8b
call fcn.004722e0
cmp eax, 3
jg 0x42ab8b
cmp byte [esp + 0x17], bl
jne 0x42ab8b
push 3
push 0x23
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetup_after_install_set_start_run_exe.cpp
lea ecx, [esp + 0xa4]
call fcn.00473160
add eax, 4
push str.Check_failed:_result.
mov byte [esp + 0x1cc], 4
push eax
mov dword [esp + 0x28], esi
call fcn.004041d0
add esp, 8
mov dword [esp + 0x1c8], 3
test byte [esp + 0x20], 1
je 0x42aba9
lea ecx, [esp + 0x98]
call fcn.00472c30
push 6
push str.QQ.exe
lea ecx, [esp + 0x30]
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebx
mov word [esp + 0x34], bx
call fcn.00405680
mov byte [esp + 0x1c8], 5
push 3
push 0x4cb300
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov word [esp + 0x50], bx
call fcn.00405680
lea edx, [esp + 0x180]
push edx
lea ecx, [esp + 0x64]
mov byte [esp + 0x1cc], 6
call fcn.00475a60
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x80]
push edx
mov ecx, eax
mov byte [esp + 0x1d0], 7
call fcn.00476020
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x1a0]
push edx
mov ecx, eax
mov byte [esp + 0x1d0], 8
call fcn.00476020
lea ecx, [esp + 0x7c]
mov byte [esp + 0x1c8], 0xa
call fcn.00475620
lea ecx, [esp + 0x60]
mov byte [esp + 0x1c8], 0xb
call fcn.00475620
mov esi, 8
cmp dword [esp + 0x5c], esi
jb 0x42ac76
mov eax, dword [esp + 0x48]
push eax
call fcn.00495fd1
add esp, 4
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], bx
mov byte [esp + 0x1c8], 0xd
cmp dword [esp + 0x40], esi
jb 0x42ac9e
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00495fd1
add esp, 4
push 1
push 0x4d09c4
lea ecx, [esp + 0x134]
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebx
mov word [esp + 0x34], bx
mov dword [esp + 0x14c], edi
mov dword [esp + 0x148], ebx
mov word [esp + 0x138], bx
call fcn.00405680
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1a4]
push edx
lea ecx, [esp + 0x138]
mov byte [esp + 0x1d4], 0xe
call fcn.0040eb90
push 0xd
push 0x4d09c8
lea ecx, [esp + 0x134]
call fcn.0040ea90
cmp dword [esp + 0x17c], esi
mov eax, dword [esp + 0x168]
jae 0x42ad1d
lea eax, [esp + 0x168]
mov ecx, dword [esp + 0x178]
mov edx, dword [esp + 0x140]
push ecx
push eax
push edx
push ebx
lea ecx, [esp + 0x13c]
call fcn.00411610
test eax, eax
je 0x42ad65
cmp dword [esp + 0x144], esi
mov eax, dword [esp + 0x130]
jae 0x42ad56
lea eax, [esp + 0x130]
push eax
push str.QQ2009
lea ecx, [esp + 0x20]
call fcn.0047c110
cmp dword [esp + 0x144], esi
jb 0x42ad7e
mov eax, dword [esp + 0x130]
push eax
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x19c]
mov dword [esp + 0x144], edi
mov dword [esp + 0x140], ebx
mov word [esp + 0x130], bx
mov byte [esp + 0x1c8], 3
call fcn.00475620
cmp dword [esp + 0x198], esi
jb 0x42adc1
mov ecx, dword [esp + 0x184]
push ecx
call fcn.00495fd1
add esp, 4
cmp dword [esp + 0x17c], esi
mov dword [esp + 0x198], edi
mov dword [esp + 0x194], ebx
mov word [esp + 0x184], bx
jb 0x42adf0
mov edx, dword [esp + 0x168]
push edx
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x17c], edi
mov dword [esp + 0x178], ebx
mov word [esp + 0x168], bx
mov byte [esp + 0x1c8], bl
call fcn.0047bb30
jmp 0x42af12
mov eax, dword [esp + 0x15c]
push 5
push str.false
push eax
push ebx
lea ecx, [esp + 0x158]
call fcn.004060e0
test eax, eax
jne 0x42aeaf
lea ecx, [esp + 0x18]
call fcn.0047b890
push 0x2001f
push str.SOFTWAREMicrosoftWindowsCurrentVersionRun
push closesocket
lea ecx, [esp + 0x24]
mov byte [esp + 0x1d4], 0xf
call fcn.0047bc30
cmp eax, ebx
lea ecx, [esp + 0x18]
je 0x42ae93
mov byte [esp + 0x1c8], bl
call fcn.0047bb30
cmp dword [esp + 0x160], 0x10
jb 0x42af2c
mov ecx, dword [esp + 0x14c]
push ecx
jmp 0x42af24
push str.QQ2009
call fcn.0047bdd0
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c8], bl
call fcn.0047bb30
jmp 0x42af12
cmp dword [0x4e8f68], 1
jne 0x42aef8
call fcn.004722e0
cmp eax, 3
jg 0x42aef8
push 3
push 0x37
push str.R:BuildWorkTempQQ1.87HummerPack4921AutoProject_setup3HummerSetup_after_install_set_start_run_exe.cpp
lea ecx, [esp + 0xa4]
call fcn.00473160
add eax, 4
push str.Check_failed:_false.
mov byte [esp + 0x1cc], 0x10
push eax
mov dword [esp + 0x28], 2
call fcn.004041d0
add esp, 8
mov dword [esp + 0x1c8], ebx
test byte [esp + 0x20], 2
je 0x42af12
lea ecx, [esp + 0x98]
call fcn.00472c30
cmp dword [esp + 0x160], 0x10
jb 0x42af2c
mov edx, dword [esp + 0x14c]
push edx
call fcn.00495fd1
add esp, 4
mov ecx, dword [esp + 0x1c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1a8]
xor ecx, esp
call fcn.00495cb8
mov esp, ebp
pop ebp
ret 4