Function at 0x476116
Capabilities:
Delete file

Disassembly:
push 0xcc
mov eax, 0x5eb116
call fcn.0059bbd7
mov edi, ecx
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
and dword [ebp - 0xd0], 0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi]
cmp eax, 0x1388
jne 0x47614d
lea ecx, [edi + 0x2c]
call fcn.004c2907
mov eax, dword [esi]
xor ebx, ebx
inc ebx
cmp eax, 0x835
jne 0x4761f1
push 0xa33
push str.HealthMgr::OnCopyData
push str.__s__d_OnCopyData_dynamimc_wallpaper
call fcn.0040a649
add esp, 0xc
push 0
call fcn.0047a1f7
call fcn.004e0aa0
test al, al
jne 0x476198
lea ecx, [edi + 0xdc]
call fcn.0043f420
lea ecx, [edi + 0x234]
call fcn.0043d930
call fcn.0047a563
test al, al
je 0x4761d3
push 0xa3a
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static
call fcn.0040a649
add esp, 0xc
call fcn.004e0fa9
push ecx
mov ecx, ebx
test al, al
je 0x4761c8
mov edx, ebx
jmp 0x4761cb
push 2
pop edx
call fcn.004dcf88
pop ecx
jmp 0x4761f1
push 0xa43
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static_dyna
call fcn.0040a649
add esp, 0xc
mov ecx, edi
call fcn.0047149a
mov eax, dword [esi]
cmp eax, 0x960
jne 0x47633c
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
and dword [ebp - 4], 0
cmp dword [ebp - 0x18], 0
jne 0x476232
lea ecx, [ebp - 0x28]
call fcn.00404812
jmp 0x476b64
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0xa8]
call fcn.004d93c7
sub esp, 0x18
mov byte [ebp - 4], bl
mov ecx, esp
lea eax, [ebp - 0xa8]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0xc8]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x476276
mov eax, dword [eax]
push eax
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x4762a4
mov eax, dword [eax]
push eax
push 0xa4e
push str.HealthMgr::OnCopyData
push str.__s__d_push_msg_to_server_strMsg_s__pushMsg_s
call fcn.0040a649
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.0040b67e
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], bl
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
je 0x476323
lea eax, [ebp - 0xa8]
push eax
push 0x2ee1
lea ecx, [edi + 0x2c]
call fcn.004c2947
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x414]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x44], 0x2ee1
call fcn.0047e54a
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0xa8]
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c4
jne 0x476397
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
push 0xa5a
push str.HealthMgr::OnCopyData
push str.__s__d_notify_hb_msg
mov dword [ebp - 4], 5
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0046fb4b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c9
jne 0x4765ae
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 6
mov ecx, esp
lea eax, [ebp - 0x28]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x4763f3
mov eax, dword [eax]
push eax
push 0xa61
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_CURSOR_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.0040b67e
push ecx
push 0x642118
lea ecx, [ebp - 0x28]
call fcn.00409de4
mov esi, eax
cmp esi, 0xffffffff
je 0x4765a6
push ecx
push esi
push 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.0040a02b
push ecx
push 0xffffffffffffffff
lea eax, [esi + 1]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040a02b
push ebx
push ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 9
call fcn.0045bc26
pop ecx
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004db640
pop ecx
push 0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00404ba6
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x7c], 0x10
lea ecx, [ebp - 0x90]
mov edx, dword [ebp - 0x80]
cmovae ecx, dword [ebp - 0x90]
push eax
call fcn.0043b9c3
pop ecx
lea ecx, [ebp - 0x38]
call fcn.004056d7
test al, al
jne 0x4764e6
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
call fcn.00404812
or eax, 0xffffffff
jmp 0x476b66
and dword [ebp - 0xd0], 0
push str.kind
call fcn.00405401
lea edx, [ebp - 0xd0]
mov ecx, eax
call fcn.0043bf56
push 0x63778c
lea ecx, [ebp - 0xc8]
call fcn.004115c4
test al, al
je 0x476528
cmp dword [ebp - 0xd0], ebx
jne 0x476528
lea ecx, [edi + 0x50]
call fcn.004447b8
push ecx
mov edx, ebx
mov ecx, ebx
call fcn.004dcf88
pop ecx
lea ecx, [ebp - 0x58]
call fcn.004d6c63
push str.bkinfomouse_preview_config
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa8]
call fcn.0041152a
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xa8]
call fcn.0040b67e
lea ecx, [ebp - 0x38]
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x476b31
cmp eax, 0x9ca
jne 0x4767b1
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x47660a
mov eax, dword [eax]
push eax
push 0xa7c
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
je 0x47678e
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004def10
push 0x6361dc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.0047e5f9
push ecx
push 0x633b4c
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0047e5f9
cmp esi, 0xffffffff
je 0x4766c4
cmp eax, 0xffffffff
je 0x4766c4
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0x78]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x10
push eax
push ecx
mov dword [ebp - 0xd0], 0x11
call fcn.00431593
pop ecx
mov ecx, eax
call fcn.00431705
mov byte [ebp - 0xc9], bl
test al, al
je 0x4766cb
mov byte [ebp - 0xc9], 0
mov dword [ebp - 4], 0xf
test byte [ebp - 0xd0], bl
je 0x4766e2
lea ecx, [ebp - 0x78]
call fcn.0040b67e
cmp byte [ebp - 0xc9], 0
je 0x47671e
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa83
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x28]
call fcn.0040b67e
lea ecx, [ebp - 0x40]
jmp 0x476228
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004c2947
mov esi, eax
push esi
push 0xa87
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x4c], 0
add esp, 0x10
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x44], ebx
call fcn.00404698
lea eax, [ebp - 0x60]
push eax
lea ecx, [edi + 0x42c]
call fcn.0047e54a
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x476a87
push 0x64a5a8
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x12
call fcn.004df807
pop ecx
lea ecx, [ebp - 0x58]
jmp 0x476a87
cmp eax, 0x9d2
jne 0x476a94
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x13
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x47680d
mov eax, dword [eax]
push eax
push 0xa94
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
lea ecx, [ebp - 0x78]
je 0x476a27
push 0x64dd54
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.004ce48f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
call fcn.0040b67e
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004def10
push 0x6361dc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.0047e5f9
push ecx
push 0x633b4c
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0047e5f9
cmp esi, 0xffffffff
je 0x476904
cmp eax, 0xffffffff
je 0x476904
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0xc8]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x18
push eax
push ecx
mov dword [ebp - 0xd0], 0x22
call fcn.00431593
pop ecx
mov ecx, eax
call fcn.00431705
test al, al
je 0x476906
xor bl, bl
mov dword [ebp - 4], 0x17
test byte [ebp - 0xd0], 2
je 0x476921
lea ecx, [ebp - 0xc8]
call fcn.0040b67e
test bl, bl
je 0x4769a2
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa9d
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xc8]
push 0x64eae0
call fcn.0040b0d5
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.004ce48f
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0xc8]
call fcn.0040b67e
lea ecx, [ebp - 0x28]
call fcn.0040b67e
lea ecx, [ebp - 0x78]
jmp 0x476711
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004c2947
mov esi, eax
push esi
push 0xaa3
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x9c], 0
add esp, 0x10
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0x94], ebx
call fcn.00404698
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x42c]
call fcn.0047e54a
lea ecx, [ebp - 0xac]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x476a7f
push 0x64eae8
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00445efc
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004ce48f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
call fcn.0040b67e
push 0x64a5a8
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
call fcn.004df807
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0x78]
call fcn.0040b67e
lea ecx, [ebp - 0x40]
jmp 0x476b31
cmp eax, 0x9cb
jne 0x476b38
push dword [esi + 4]
and dword [ebp - 0x80], 0
lea ecx, [ebp - 0x90]
push dword [esi + 8]
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x1f
mov ecx, esp
lea eax, [ebp - 0x90]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00435b82
add esp, 0x18
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x14], 8
jb 0x476af9
mov eax, dword [eax]
push eax
push 0xab3
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
call fcn.0047171d
lea ecx, [ebp - 0x90]
call fcn.00404812
jmp 0x476b5b
cmp eax, 0x9d0
jne 0x476b5b
push 0xab7
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_DIGITALMAN_SHOW
call fcn.0040a649
add esp, 0xc
call fcn.0047a58e
mov eax, dword [ebp - 0xd8]
and dword [eax], 0
xor eax, eax
call fcn.0059bb81
ret 0x10