Function at 0x49bfc0
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1664
mov eax, dword fs:[0]
push eax
mov eax, 0x32b4
call fcn.0047a610
mov eax, dword [0x4eb00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3258], ecx
movzx eax, byte [0x4eec1c]
test eax, eax
je 0x49c007
xor eax, eax
jmp 0x49c915
mov byte [0x4eec1c], 1
mov ecx, dword [ebp - 0x3258]
mov dword [ecx], 0
mov edx, dword [ebp - 0x3258]
mov dword [edx + 8], 0
mov eax, dword [ebp - 0x3258]
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0x3258]
add ecx, 0x26c
call fcn.00416320
mov dword [ebp - 0x3274], 0x19000
mov ecx, dword [ebp - 0x3274]
push ecx
call fcn.0047a4ed
add esp, 4
mov dword [ebp - 0x32c0], eax
mov edx, dword [ebp - 0x32c0]
mov dword [ebp - 0x3268], edx
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::constructor_void_
mov dword [ebp - 4], 0
push 0x50
mov eax, dword [ebp - 0x3274]
push eax
mov ecx, dword [ebp - 0x3268]
push ecx
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_int___thiscall_CNsNet::GetUrlInfo_wchar_t_const___char___int__int_
mov dword [ebp - 0x3294], eax
cmp dword [ebp - 0x3294], 0
je 0x49c0e6
mov eax, dword [ebp - 0x3258]
cmp dword [eax + 0x460], 0
je 0x49c0e6
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_int___thiscall_CNsNet::GetInfoLen_void_
mov dword [ebp - 0x3298], eax
mov ecx, dword [ebp - 0x3298]
push ecx
mov edx, dword [ebp - 0x3268]
push edx
call sym.Install_vip.exe_void___cdecl_EasyEncode_char___int_
add esp, 8
cmp dword [ebp - 0x3294], 0
je 0x49c108
mov eax, dword [ebp - 0x3268]
push eax
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_private:_bool___thiscall_CNsUpdate::CheckInfo_char_const__
movzx ecx, al
test ecx, ecx
jne 0x49c15d
mov edx, dword [ebp - 0x3274]
push edx
mov eax, dword [ebp - 0x3268]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_private:_bool___thiscall_CNsUpdate::GetInfoEx_wchar_t_const___char___unsigned_int_
mov byte [ebp - 0x3261], al
movzx edx, byte [ebp - 0x3261]
test edx, edx
jne 0x49c15d
mov dword [ebp - 0x329c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x329c]
jmp 0x49c915
xor ecx, ecx
mov eax, dword [ebp - 0x3274]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0047a4ed
add esp, 4
mov dword [ebp - 0x32a0], eax
mov eax, dword [ebp - 0x32a0]
mov dword [ebp - 0x327c], eax
mov ecx, dword [ebp - 0x3274]
push ecx
mov edx, dword [ebp - 0x327c]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x3268]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 0x3268]
mov dword [ebp - 0x32a4], ecx
mov edx, dword [ebp - 0x32a4]
push edx
call fcn.0047a4e8
add esp, 4
mov eax, dword [ebp - 0x327c]
push eax
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::Parse_wchar_t_const__
mov ecx, dword [ebp - 0x327c]
mov dword [ebp - 0x32a8], ecx
mov edx, dword [ebp - 0x32a8]
push edx
call fcn.0047a4e8
add esp, 4
lea eax, [ebp - 0x27e0]
push eax
push 0x4ceedc
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
push str.disable
lea ecx, [ebp - 0x27e0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x49c2da
push 0x3e8
push 0
lea edx, [ebp - 0x3f8]
push edx
call fcn.00433560
add esp, 0xc
lea eax, [ebp - 0x3f8]
push eax
push str.DMsg
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x49c2d3
lea ecx, [ebp - 0x3254]
call fcn.0040dbe0
mov byte [ebp - 4], 1
push 1
push 9
push 8
push 0xc8
push 0x12c
push 0xa
push 0
call sym.Install_vip.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
add eax, 0x212
push eax
lea edx, [ebp - 0x3f8]
push edx
call sym.Install_vip.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
mov eax, dword [eax + 4]
push eax
lea ecx, [ebp - 0x3254]
call fcn.0040e350
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3254]
call fcn.0040de10
push 0
call fcn.00439a94
push 0x4cef08
lea ecx, [ebp - 0x27e0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x49c32d
cmp dword [ebp + 0xc], 0
je 0x49c2ff
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x4eec1c], 0
mov dword [ebp - 0x32ac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x32ac]
jmp 0x49c915
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_private:_void___thiscall_CNsUpdate::CheckSetup_void_
lea edx, [ebp - 0x7e0]
push edx
push 0x4cef10
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea eax, [ebp - 0x7e0]
push eax
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_private:_void___thiscall_CNsUpdate::CheckTask_wchar_t_const__
mov dword [ebp - 0x328c], 0
push str.File
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeCount_wchar_t_const__
mov dword [ebp - 0x3288], eax
cmp dword [ebp + 0xc], 0
je 0x49c3a6
mov ecx, dword [ebp - 0x3288]
push ecx
mov edx, dword [ebp - 0x328c]
push edx
push 2
call dword [ebp + 0xc]
mov dword [ebp - 0x3284], 0
mov dword [ebp - 0x326c], 0
mov dword [ebp - 0x3280], 0
jmp 0x49c3d5
mov eax, dword [ebp - 0x3280]
add eax, 1
mov dword [ebp - 0x3280], eax
mov ecx, dword [ebp - 0x3280]
cmp ecx, dword [ebp - 0x3288]
jge 0x49c88d
mov edx, dword [ebp - 0x3258]
cmp dword [edx], 0
je 0x49c449
mov eax, dword [ebp - 0x3258]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x3258]
mov dword [ecx + 8], 1
cmp dword [ebp + 0xc], 0
je 0x49c41b
push 0
push 0
push 4
call dword [ebp + 0xc]
mov byte [0x4eec1c], 0
mov dword [ebp - 0x32b0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x32b0]
jmp 0x49c915
lea edx, [ebp - 0x326c]
push edx
lea eax, [ebp - 0x27e0]
push eax
push 0x4cef24
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea ecx, [ebp - 0x27e0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x49c483
jmp 0x49c3c6
lea edx, [ebp - 0x7e0]
push edx
lea ecx, [ebp - 0x3278]
call fcn.004096a0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x27e0]
push eax
lea ecx, [ebp - 0x3278]
call fcn.00414f80
lea ecx, [ebp - 0x326c]
push ecx
lea edx, [ebp - 0x27e0]
push edx
push str.SavePath
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x27e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x49c4f4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3278]
call fcn.00409680
jmp 0x49c3c6
mov ecx, dword [ebp - 0x3258]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x3260]
call fcn.004096a0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x27e0]
push edx
lea ecx, [ebp - 0x3260]
call fcn.00414f80
lea eax, [ebp - 0x326c]
push eax
lea ecx, [ebp - 0x27e0]
push ecx
push str.RealPath
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea edx, [ebp - 0x3260]
push edx
lea ecx, [ebp - 0x3270]
call fcn.00409740
mov byte [ebp - 4], 4
mov byte [ebp - 0x3259], 0
lea eax, [ebp - 0x27e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x49c603
mov ecx, dword [ebp - 0x3258]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x3270]
call fcn.004095c0
lea edx, [ebp - 0x27e0]
push edx
lea ecx, [ebp - 0x3270]
call fcn.00414f80
mov byte [ebp - 0x3259], 1
push 0x410
push 0
lea eax, [ebp - 0x2db0]
push eax
call fcn.00433560
add esp, 0xc
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x2db0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x3270]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea edx, [ebp - 0x2ba8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x2db0]
push eax
mov ecx, dword [ebp - 0x3258]
add ecx, 0x26c
call fcn.004231a0
lea ecx, [ebp - 0x326c]
push ecx
lea edx, [ebp - 0x27e0]
push edx
push str.Size
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x27e0]
push eax
call fcn.0043dfd4
add esp, 4
mov dword [ebp - 0x3290], eax
lea ecx, [ebp - 0x326c]
push ecx
lea edx, [ebp - 0x27e0]
push edx
push 0x4cef68
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
mov eax, dword [ebp - 0x3290]
push eax
lea ecx, [ebp - 0x27e0]
push ecx
lea ecx, [ebp - 0x3270]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x49c7bc
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call sym.Install_vip.exe_int___cdecl_NsDeleteFileEx_wchar_t_const__
add esp, 4
push 0
mov edx, dword [ebp + 0x10]
push edx
push 0
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x3278]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
mov ecx, dword [ebp - 0x3258]
add ecx, 0x278
call sym.Install_vip.exe_public:_int___thiscall_CNsDownload::GetHttpFile_wchar_t_const___wchar_t_const___int__void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double___int_
mov eax, dword [ebp - 0x3284]
add eax, 1
mov dword [ebp - 0x3284], eax
mov ecx, dword [ebp - 0x3290]
push ecx
lea edx, [ebp - 0x27e0]
push edx
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x49c7a4
mov eax, dword [ebp - 0x3258]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x3258]
mov dword [ecx + 0xc], 1
cmp dword [ebp + 0xc], 0
je 0x49c737
push 0
push 0
push 5
call dword [ebp + 0xc]
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [0x4eec1c], 0
mov dword [ebp - 0x32b4], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3270]
call fcn.00409680
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3260]
call fcn.00409680
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3278]
call fcn.00409680
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x32b4]
jmp 0x49c915
movzx edx, byte [ebp - 0x3259]
test edx, edx
je 0x49c7bc
mov eax, dword [ebp - 0x3258]
mov dword [eax + 4], 1
cmp dword [ebp + 0xc], 0
je 0x49c7d5
mov ecx, dword [ebp - 0x3288]
push ecx
mov edx, dword [ebp - 0x328c]
push edx
push 2
call dword [ebp + 0xc]
lea eax, [ebp - 0x326c]
push eax
lea ecx, [ebp - 0x27e0]
push ecx
push 0x4cef70
mov ecx, dword [ebp - 0x3258]
add ecx, 0x45c
call sym.Install_vip.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
push str.hide
lea edx, [ebp - 0x27e0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x49c82b
push 0
push 0
push 0
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call sym.Install_vip.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x49c85b
push str.show
lea eax, [ebp - 0x27e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x49c85b
push 5
push 0
push 0
lea ecx, [ebp - 0x3260]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call sym.Install_vip.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3270]
call fcn.00409680
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3260]
call fcn.00409680
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3278]
call fcn.00409680
jmp 0x49c3c6
cmp dword [ebp - 0x3284], 0
jle 0x49c8dd
cmp dword [ebp + 0xc], 0
je 0x49c8a5
push 0
push 0
push 3
call dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3258]
call sym.Install_vip.exe_private:_void___thiscall_CNsUpdate::SaveUpdateCfg_void_
mov byte [0x4eec1c], 0
mov dword [ebp - 0x32b8], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x32b8]
jmp 0x49c915
cmp dword [ebp + 0xc], 0
je 0x49c8ec
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x4eec1c], 0
mov dword [ebp - 0x32bc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29a0]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov eax, dword [ebp - 0x32bc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042e9de
mov esp, ebp
pop ebp
ret 0xc