Function at 0x470177
Capabilities:
Delete file

Disassembly:
push 0xcc
mov eax, 0x5e0de9
call fcn.00592017
mov edi, ecx
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
and dword [ebp - 0xd0], 0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi]
cmp eax, 0x1388
jne 0x4701ae
lea ecx, [edi + 0x2c]
call fcn.004b98d1
mov eax, dword [esi]
xor ebx, ebx
inc ebx
cmp eax, 0x835
jne 0x470252
push 0xa31
push str.HealthMgr::OnCopyData
push str.__s__d_OnCopyData_dynamimc_wallpaper
call fcn.0040a649
add esp, 0xc
push 0
call fcn.004742b7
call fcn.004d700c
test al, al
jne 0x4701f9
lea ecx, [edi + 0xdc]
call fcn.0043a350
lea ecx, [edi + 0x234]
call fcn.00438860
call fcn.00474623
test al, al
je 0x470234
push 0xa38
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static
call fcn.0040a649
add esp, 0xc
call fcn.004d742e
push ecx
mov ecx, ebx
test al, al
je 0x470229
mov edx, ebx
jmp 0x47022c
push 2
pop edx
call fcn.004d34f4
pop ecx
jmp 0x470252
push 0xa41
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static_dyna
call fcn.0040a649
add esp, 0xc
mov ecx, edi
call fcn.0046b4fb
mov eax, dword [esi]
cmp eax, 0x960
jne 0x47039d
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
and dword [ebp - 4], 0
cmp dword [ebp - 0x18], 0
jne 0x470293
lea ecx, [ebp - 0x28]
call fcn.00404812
jmp 0x470bc5
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0xa8]
call fcn.004cf9c8
sub esp, 0x18
mov byte [ebp - 4], bl
mov ecx, esp
lea eax, [ebp - 0xa8]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0xc8]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x4702d7
mov eax, dword [eax]
push eax
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x470305
mov eax, dword [eax]
push eax
push 0xa4c
push str.HealthMgr::OnCopyData
push str.__s__d_push_msg_to_server_strMsg_s__pushMsg_s
call fcn.0040a649
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.0040b67b
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], bl
call fcn.0040b67b
cmp byte [edi + 0x41c], 0
je 0x470384
lea eax, [ebp - 0xa8]
push eax
push 0x2ee1
lea ecx, [edi + 0x2c]
call fcn.004b9911
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x414]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x44], 0x2ee1
call fcn.004777d6
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0xa8]
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c4
jne 0x4703f8
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
push 0xa58
push str.HealthMgr::OnCopyData
push str.__s__d_notify_hb_msg
mov dword [ebp - 4], 5
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00469bac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c9
jne 0x47060f
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 6
mov ecx, esp
lea eax, [ebp - 0x28]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x470454
mov eax, dword [eax]
push eax
push 0xa5f
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_CURSOR_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.0040b67b
push ecx
push 0x6363b8
lea ecx, [ebp - 0x28]
call fcn.00409de4
mov esi, eax
cmp esi, 0xffffffff
je 0x470607
push ecx
push esi
push 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.0040a02b
push ecx
push 0xffffffffffffffff
lea eax, [esi + 1]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040a02b
push ebx
push ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 9
call fcn.00456b81
pop ecx
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004d1bac
pop ecx
push 0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00404ba6
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x7c], 0x10
lea ecx, [ebp - 0x90]
mov edx, dword [ebp - 0x80]
cmovae ecx, dword [ebp - 0x90]
push eax
call fcn.004368f0
pop ecx
lea ecx, [ebp - 0x38]
call fcn.004056d7
test al, al
jne 0x470547
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
call fcn.00404812
or eax, 0xffffffff
jmp 0x470bc7
and dword [ebp - 0xd0], 0
push str.kind
call fcn.00405401
lea edx, [ebp - 0xd0]
mov ecx, eax
call fcn.00436e83
push 0x62c5c4
lea ecx, [ebp - 0xc8]
call fcn.004115b6
test al, al
je 0x470589
cmp dword [ebp - 0xd0], ebx
jne 0x470589
lea ecx, [edi + 0x50]
call fcn.0043f6e8
push ecx
mov edx, ebx
mov ecx, ebx
call fcn.004d34f4
pop ecx
lea ecx, [ebp - 0x58]
call fcn.004cd264
push str.bkinfomouse_preview_config
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa8]
call fcn.0041151c
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67b
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xa8]
call fcn.0040b67b
lea ecx, [ebp - 0x38]
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x470b92
cmp eax, 0x9ca
jne 0x470812
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x47066b
mov eax, dword [eax]
push eax
push 0xa7a
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x58]
call fcn.0040b67b
cmp byte [edi + 0x41c], 0
je 0x4707ef
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004d547c
push 0x62b044
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00477885
push ecx
push 0x628a04
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.00477885
cmp esi, 0xffffffff
je 0x470725
cmp eax, 0xffffffff
je 0x470725
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0x78]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x10
push eax
push ecx
mov dword [ebp - 0xd0], 0x11
call fcn.0042c537
pop ecx
mov ecx, eax
call fcn.0042c6a9
mov byte [ebp - 0xc9], bl
test al, al
je 0x47072c
mov byte [ebp - 0xc9], 0
mov dword [ebp - 4], 0xf
test byte [ebp - 0xd0], bl
je 0x470743
lea ecx, [ebp - 0x78]
call fcn.0040b67b
cmp byte [ebp - 0xc9], 0
je 0x47077f
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa81
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x28]
call fcn.0040b67b
lea ecx, [ebp - 0x40]
jmp 0x470289
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004b9911
mov esi, eax
push esi
push 0xa85
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x4c], 0
add esp, 0x10
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x44], ebx
call fcn.00404698
lea eax, [ebp - 0x60]
push eax
lea ecx, [edi + 0x42c]
call fcn.004777d6
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x470ae8
push 0x63e418
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x12
call fcn.004d5d73
pop ecx
lea ecx, [ebp - 0x58]
jmp 0x470ae8
cmp eax, 0x9d2
jne 0x470af5
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x13
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x47086e
mov eax, dword [eax]
push eax
push 0xa92
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x58]
call fcn.0040b67b
cmp byte [edi + 0x41c], 0
lea ecx, [ebp - 0x78]
je 0x470a88
push 0x641b64
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.004c4ca4
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
call fcn.0040b67b
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004d547c
push 0x62b044
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.00477885
push ecx
push 0x628a04
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.00477885
cmp esi, 0xffffffff
je 0x470965
cmp eax, 0xffffffff
je 0x470965
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0xc8]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x18
push eax
push ecx
mov dword [ebp - 0xd0], 0x22
call fcn.0042c537
pop ecx
mov ecx, eax
call fcn.0042c6a9
test al, al
je 0x470967
xor bl, bl
mov dword [ebp - 4], 0x17
test byte [ebp - 0xd0], 2
je 0x470982
lea ecx, [ebp - 0xc8]
call fcn.0040b67b
test bl, bl
je 0x470a03
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa9b
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xc8]
push 0x6428f0
call fcn.0040b0d5
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.004c4ca4
lea ecx, [ebp - 0x58]
call fcn.0040b67b
lea ecx, [ebp - 0xc8]
call fcn.0040b67b
lea ecx, [ebp - 0x28]
call fcn.0040b67b
lea ecx, [ebp - 0x78]
jmp 0x470772
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004b9911
mov esi, eax
push esi
push 0xaa1
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x9c], 0
add esp, 0x10
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0x94], ebx
call fcn.00404698
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x42c]
call fcn.004777d6
lea ecx, [ebp - 0xac]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x470ae0
push 0x6428f8
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004c4ca4
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
call fcn.0040b67b
push 0x63e418
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
call fcn.004d5d73
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67b
lea ecx, [ebp - 0x78]
call fcn.0040b67b
lea ecx, [ebp - 0x40]
jmp 0x470b92
cmp eax, 0x9cb
jne 0x470b99
push dword [esi + 4]
and dword [ebp - 0x80], 0
lea ecx, [ebp - 0x90]
push dword [esi + 8]
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x1f
mov ecx, esp
lea eax, [ebp - 0x90]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430aaf
add esp, 0x18
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x14], 8
jb 0x470b5a
mov eax, dword [eax]
push eax
push 0xab1
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x58]
call fcn.0040b67b
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
call fcn.0046b77e
lea ecx, [ebp - 0x90]
call fcn.00404812
jmp 0x470bbc
cmp eax, 0x9d0
jne 0x470bbc
push 0xab5
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_DIGITALMAN_SHOW
call fcn.0040a649
add esp, 0xc
call fcn.0047464e
mov eax, dword [ebp - 0xd8]
and dword [eax], 0
xor eax, eax
call fcn.00591fc1
ret 0x10