Function at 0x40ba70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x41e988
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
xor ebx, ebx
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xffffffff
call sub.MFC42.DLL_CString::CString_3
push 0x429bf8
lea ecx, [esp + 0x10]
mov dword [esp + 0x64], ebx
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x30]
mov byte [esp + 0x60], 1
call fcn.00419190
lea eax, [esp + 8]
mov byte [esp + 0x60], 2
push eax
call fcn.00416220
add esp, 4
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x64], 3
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 8]
mov byte [esp + 0x60], 2
call fcn.0041d0e6
push str.configcfg_update_flag.sfr
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator_1
push ecx
lea edx, [esp + 0x10]
mov ecx, esp
mov dword [esp + 0xc], esp
push edx
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x34]
call fcn.004193e0
cmp eax, ebx
je 0x40bc32
lea ecx, [esp + 0x20]
call fcn.0041d170
push 0x429bf8
lea ecx, [esp + 0xc]
mov byte [esp + 0x64], 4
call sub.MFC42.DLL_CString::CString_2
push str.__xml_version_1.0__encoding_gb2312____r_n
lea ecx, [esp + 0xc]
mov byte [esp + 0x64], 5
call fcn.0041d0fe
push str._sinforfile__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_filehead__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_t______file_head______r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_t_fileflag_flag_SinforFile__version_20071205____r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t__filehead__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_filecontent__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_t_vpn_update_1____vpn__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t_t____
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str._t__filecontent__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
push str.__sinforfile__r_n
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [esp + 0xc]
push ebx
push 0x1001
push eax
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CFile::Open
mov ecx, dword [esp + 8]
mov eax, dword [ecx - 8]
lea ecx, [esp + 8]
push eax
push ebx
call sub.MFC42.DLL_CString::GetBuffer
push eax
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CFile::Write
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CFile::Close
lea ecx, [esp + 8]
mov byte [esp + 0x60], 4
call fcn.0041d0e6
lea ecx, [esp + 0x20]
mov byte [esp + 0x60], 2
call sub.MFC42.DLL_CFile::CFile
jmp 0x40bca1
lea ecx, [esp + 0x30]
call fcn.0041c3d0
push eax
lea edx, [esp + 0x18]
push ebx
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.filecontent_vpn
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x40]
call fcn.00419900
mov esi, eax
cmp esi, ebx
je 0x40bc98
push ecx
mov ecx, esp
mov dword [esp + 0xc], esp
push 0x427c54
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [esp + 0x68], 6
mov ecx, esp
mov dword [esp + 0x18], esp
push str.update
call sub.MFC42.DLL_CString::CString_2
push esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], 2
call fcn.00419d90
lea ecx, [esp + 0x30]
call fcn.004194e0
lea ecx, [esp + 0x30]
mov byte [esp + 0x60], 1
call fcn.004192c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x60], bl
call fcn.0041d0e6
lea ecx, [esp + 0x1c]
mov dword [esp + 0x60], 0xffffffff
call fcn.0041d0e6
mov ecx, dword [esp + 0x58]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x5c
ret