Function at 0x46d1d0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x475a58
mov eax, dword fs:[0]
push eax
mov eax, 0x101b0
call fcn.00450fe0
mov eax, dword [0x49c00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1018c], ecx
movzx eax, byte [0x49f848]
test eax, eax
je 0x46d217
xor eax, eax
jmp 0x46d968
mov byte [0x49f848], 1
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx], 0
mov edx, dword [ebp - 0x1018c]
mov dword [edx + 8], 0
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x26c
call fcn.004168c0
push 0x50
push 0x5000
lea ecx, [ebp - 0x5970]
push ecx
mov edx, dword [ebp + 8]
push edx
call sym.Install_adv.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Install_adv.exe_public:_int___thiscall_CNsNet::GetUrlInfo_wchar_t_const___char___int__int_
mov eax, dword [ebp - 0x1018c]
cmp dword [eax + 0x460], 0
je 0x46d2aa
call sym.Install_adv.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Install_adv.exe_public:_int___thiscall_CNsNet::GetInfoLen_void_
mov dword [ebp - 0x101b8], eax
mov ecx, dword [ebp - 0x101b8]
push ecx
lea edx, [ebp - 0x5970]
push edx
call sym.Install_adv.exe_void___cdecl_EasyEncode_char___int_
add esp, 8
push 0x5000
lea eax, [ebp - 0xf970]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x5970]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0xf970]
push edx
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::Parse_wchar_t_const__
lea eax, [ebp - 0x3f8]
push eax
push str.Switch
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
push str.disable
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x46d3c4
push 0xc8
push 0
lea edx, [ebp - 0x588]
push edx
call fcn.0042b9d0
add esp, 0xc
lea eax, [ebp - 0x588]
push eax
push str.DMsg
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea ecx, [ebp - 0x588]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x46d3bd
lea ecx, [ebp - 0x10188]
call fcn.0040e0c0
mov dword [ebp - 4], 0
push 1
push 9
push 8
push 0xc8
push 0x12c
push 0xa
push 0
call sym.Install_adv.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
add eax, 0x212
push eax
lea edx, [ebp - 0x588]
push edx
call sym.Install_adv.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
mov eax, dword [eax + 4]
push eax
lea ecx, [ebp - 0x10188]
call fcn.0040e910
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10188]
call fcn.0040e350
push 0
call fcn.00431ae1
push 0x48d0bc
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x46d3f7
cmp dword [ebp + 0xc], 0
je 0x46d3e9
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x49f848], 0
xor eax, eax
jmp 0x46d968
mov ecx, dword [ebp - 0x1018c]
call sym.Install_adv.exe_private:_void___thiscall_CNsUpdate::CheckSetup_void_
lea edx, [ebp - 0x970]
push edx
push 0x48d0c4
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea eax, [ebp - 0x970]
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Install_adv.exe_private:_void___thiscall_CNsUpdate::CheckTask_wchar_t_const__
mov dword [ebp - 0x101b4], 0
push str.File
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeCount_wchar_t_const__
mov dword [ebp - 0x101a8], eax
cmp dword [ebp + 0xc], 0
je 0x46d470
mov ecx, dword [ebp - 0x101a8]
push ecx
mov edx, dword [ebp - 0x101b4]
push edx
push 2
call dword [ebp + 0xc]
mov dword [ebp - 0x101ac], 0
mov dword [ebp - 0x10198], 0
mov dword [ebp - 0x101a4], 0
jmp 0x46d49f
mov eax, dword [ebp - 0x101a4]
add eax, 1
mov dword [ebp - 0x101a4], eax
mov ecx, dword [ebp - 0x101a4]
cmp ecx, dword [ebp - 0x101a8]
jge 0x46d91d
mov edx, dword [ebp - 0x1018c]
cmp dword [edx], 0
je 0x46d4f3
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx + 8], 1
cmp dword [ebp + 0xc], 0
je 0x46d4e5
push 0
push 0
push 4
call dword [ebp + 0xc]
mov byte [0x49f848], 0
xor eax, eax
jmp 0x46d968
lea edx, [ebp - 0x10198]
push edx
lea eax, [ebp - 0x3f8]
push eax
push 0x48d0d8
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x46d52d
jmp 0x46d490
lea edx, [ebp - 0x970]
push edx
lea ecx, [ebp - 0x101a0]
call fcn.004095e0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x101a0]
call fcn.00415520
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push str.SavePath
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x46d5a4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.004095a0
jmp 0x46d490
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x10194]
call fcn.004095e0
mov byte [ebp - 4], 2
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x10194]
call fcn.00415520
lea eax, [ebp - 0x10198]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
push str.RealPath
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea edx, [ebp - 0x10194]
push edx
lea ecx, [ebp - 0x1019c]
call fcn.00409690
mov byte [ebp - 4], 3
mov byte [ebp - 0x1018d], 0
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x46d6b3
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x1019c]
call fcn.004094f0
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x1019c]
call fcn.00415520
mov byte [ebp - 0x1018d], 1
push 0x410
push 0
lea eax, [ebp - 0xfd80]
push eax
call fcn.0042b9d0
add esp, 0xc
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
lea ecx, [ebp - 0xfd80]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x1019c]
call fcn.00409710
push eax
lea edx, [ebp - 0xfb78]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xfd80]
push eax
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x26c
call fcn.00428e30
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push str.Size
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x3f8]
push eax
call fcn.00435dcf
add esp, 4
mov dword [ebp - 0x101b0], eax
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push 0x48d11c
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
mov eax, dword [ebp - 0x101b0]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
lea ecx, [ebp - 0x1019c]
call fcn.00409710
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Install_adv.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x46d849
push 0
mov edx, dword [ebp + 0x10]
push edx
push 0
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
lea ecx, [ebp - 0x101a0]
call fcn.00409710
push eax
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x278
call sym.Install_adv.exe_public:_int___thiscall_CNsDownload::GetHttpFile_wchar_t_const___wchar_t_const___int__void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double___int_
mov eax, dword [ebp - 0x101ac]
add eax, 1
mov dword [ebp - 0x101ac], eax
mov ecx, dword [ebp - 0x101b0]
push ecx
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Install_adv.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x46d831
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx + 0xc], 1
cmp dword [ebp + 0xc], 0
je 0x46d7d3
push 0
push 0
push 5
call dword [ebp + 0xc]
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [0x49f848], 0
mov dword [ebp - 0x101bc], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1019c]
call fcn.004095a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10194]
call fcn.004095a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.004095a0
mov eax, dword [ebp - 0x101bc]
jmp 0x46d968
movzx edx, byte [ebp - 0x1018d]
test edx, edx
je 0x46d849
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 1
cmp dword [ebp + 0xc], 0
je 0x46d862
mov ecx, dword [ebp - 0x101a8]
push ecx
mov edx, dword [ebp - 0x101b4]
push edx
push 2
call dword [ebp + 0xc]
lea eax, [ebp - 0x10198]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
push 0x48d124
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Install_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
push str.hide
lea edx, [ebp - 0x3f8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x46d8b8
push 0
push 0
push 0
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
call sym.Install_adv.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x46d8e8
push str.show
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x46d8e8
push 5
push 0
push 0
lea ecx, [ebp - 0x10194]
call fcn.00409710
push eax
call sym.Install_adv.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1019c]
call fcn.004095a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10194]
call fcn.004095a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.004095a0
jmp 0x46d490
cmp dword [ebp - 0x101ac], 0
jle 0x46d950
cmp dword [ebp + 0xc], 0
je 0x46d935
push 0
push 0
push 3
call dword [ebp + 0xc]
mov ecx, dword [ebp - 0x1018c]
call sym.Install_adv.exe_private:_void___thiscall_CNsUpdate::SaveUpdateCfg_void_
mov byte [0x49f848], 0
mov eax, 1
jmp 0x46d968
cmp dword [ebp + 0xc], 0
je 0x46d95f
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x49f848], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00429d20
mov esp, ebp
pop ebp
ret 0xc