Function at 0x431480
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x447173
mov eax, dword fs:[0]
push eax
mov eax, 0x101c8
call fcn.00420d80
mov eax, dword [0x459080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x101d4], ecx
movzx eax, byte [0x45ce08]
test eax, eax
je 0x4314c9
xor eax, eax
jmp 0x431b85
mov byte [0x45ce08], 1
mov ecx, dword [ebp - 0x101d4]
mov dword [ecx], 0
mov edx, dword [ebp - 0x101d4]
mov dword [edx + 8], 0
mov eax, dword [ebp - 0x101d4]
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0x101d4]
add ecx, 0x26c
call fcn.004141d0
push 0x5000
lea ecx, [ebp - 0xf40c]
push ecx
mov edx, dword [ebp + 8]
push edx
call sym.Install_ring.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsNet::GetUrlInfo_wchar_t_const___char___int_
mov eax, dword [ebp - 0x101d4]
cmp dword [eax + 0x45c], 0
je 0x43155a
call sym.Install_ring.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsNet::GetInfoLen_void_
mov dword [ebp - 0xf7f8], eax
mov ecx, dword [ebp - 0xf7f8]
push ecx
lea edx, [ebp - 0xf40c]
push edx
call sym.Install_ring.exe_void___cdecl_EasyEncode_char___int_
add esp, 8
push 0x5000
lea eax, [ebp - 0xa014]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xf40c]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0xa014]
push edx
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::Parse_wchar_t_const__
lea eax, [ebp - 0xf7f4]
push eax
push str.Switch
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
push str.disable
lea ecx, [ebp - 0xf7f4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x431668
push 0xc8
push 0
lea edx, [ebp - 0xf98c]
push edx
call fcn.004188a0
add esp, 0xc
lea eax, [ebp - 0xf98c]
push eax
push str.DMsg
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea ecx, [ebp - 0xf98c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x431661
lea edx, [ebp - 0xfd64]
push edx
call fcn.00408d30
mov dword [ebp - 4], 0
push 9
push 8
push 0xc8
push 0x12c
push 0xa
push 0
call fcn.00401000
mov esi, eax
add esi, 0x212
call fcn.00401000
mov eax, dword [eax + 4]
push eax
mov edi, esi
lea edx, [ebp - 0xf98c]
lea eax, [ebp - 0xfd64]
call fcn.00409690
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd64]
push ecx
call fcn.00408eb0
push 0
call fcn.00418ec1
push 0x44cb48
lea edx, [ebp - 0xf7f4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x43169b
cmp dword [ebp + 0xc], 0
je 0x43168d
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x45ce08], 0
xor eax, eax
jmp 0x431b85
lea eax, [ebp - 0xa3fc]
push eax
push 0x44cb50
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
mov dword [ebp - 0xa404], 0
push str.File
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeCount_wchar_t_const__
mov dword [ebp - 0xa408], eax
cmp dword [ebp + 0xc], 0
je 0x4316ed
mov ecx, dword [ebp - 0xa408]
push ecx
mov edx, dword [ebp - 0xa404]
push edx
push 2
call dword [ebp + 0xc]
mov dword [ebp - 0xa40c], 0
mov dword [ebp - 0xa400], 0
mov dword [ebp - 0xfd68], 0
jmp 0x43171c
mov eax, dword [ebp - 0xfd68]
add eax, 1
mov dword [ebp - 0xfd68], eax
mov ecx, dword [ebp - 0xfd68]
cmp ecx, dword [ebp - 0xa408]
jge 0x431b3a
mov edx, dword [ebp - 0x101d4]
cmp dword [edx], 0
je 0x431770
mov eax, dword [ebp - 0x101d4]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x101d4]
mov dword [ecx + 8], 1
cmp dword [ebp + 0xc], 0
je 0x431762
push 0
push 0
push 4
call dword [ebp + 0xc]
mov byte [0x45ce08], 0
xor eax, eax
jmp 0x431b85
lea edx, [ebp - 0xa400]
push edx
lea eax, [ebp - 0xf7f4]
push eax
push str.WebPath
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea ecx, [ebp - 0xfd78]
push ecx
lea ecx, [ebp - 0xa3fc]
call fcn.00405740
mov dword [ebp - 4], 1
lea edx, [ebp - 0xf7f4]
push edx
lea ecx, [ebp - 0xfd78]
call fcn.0040cb60
lea eax, [ebp - 0xa400]
push eax
lea ecx, [ebp - 0xf7f4]
push ecx
push str.SavePath
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
mov ecx, dword [ebp - 0x101d4]
add ecx, 0x10
lea edx, [ebp - 0xfd70]
push edx
call fcn.00405740
mov byte [ebp - 4], 2
lea eax, [ebp - 0xf7f4]
push eax
lea ecx, [ebp - 0xfd70]
call fcn.0040cb60
lea ecx, [ebp - 0xa400]
push ecx
lea edx, [ebp - 0xf7f4]
push edx
push str.RealPath
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0xfd70]
lea esi, [ebp - 0xfd74]
call fcn.00405720
mov byte [ebp - 4], 3
mov byte [ebp - 0xfd79], 0
lea eax, [ebp - 0xf7f4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x4318e1
mov edx, dword [ebp - 0x101d4]
add edx, 0x10
lea edi, [ebp - 0xfd74]
call fcn.00405880
lea ecx, [ebp - 0xf7f4]
push ecx
lea ecx, [ebp - 0xfd74]
call fcn.0040cb60
mov byte [ebp - 0xfd79], 1
push 0x410
push 0
lea edx, [ebp - 0x1018c]
push edx
call fcn.004188a0
add esp, 0xc
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
lea eax, [ebp - 0x1018c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xfd74]
call fcn.00405980
push eax
lea ecx, [ebp - 0xff84]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [ebp - 0x1018c]
push edx
mov ecx, dword [ebp - 0x101d4]
add ecx, 0x26c
call fcn.00416900
lea eax, [ebp - 0xa400]
push eax
lea ecx, [ebp - 0xf7f4]
push ecx
push str.Size
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea edx, [ebp - 0xf7f4]
push edx
call fcn.00424730
add esp, 4
mov dword [ebp - 0xfd6c], eax
lea eax, [ebp - 0xa400]
push eax
lea ecx, [ebp - 0xf7f4]
push ecx
push 0x44cba8
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
mov edx, dword [ebp - 0xfd6c]
push edx
lea eax, [ebp - 0xf7f4]
push eax
lea eax, [ebp - 0xfd74]
call fcn.00405980
push eax
mov ecx, dword [ebp - 0x101d4]
call sym.Install_ring.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x431a6b
mov ecx, dword [ebp + 0x10]
push ecx
push 0
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
lea eax, [ebp - 0xfd78]
call fcn.00405980
push eax
mov ecx, dword [ebp - 0x101d4]
add ecx, 0x27c
call sym.Install_ring.exe_public:_int___thiscall_CNsDownload::GetHttpFile_wchar_t_const___wchar_t_const___int__void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double__
mov edx, dword [ebp - 0xa40c]
add edx, 1
mov dword [ebp - 0xa40c], edx
mov eax, dword [ebp - 0xfd6c]
push eax
lea ecx, [ebp - 0xf7f4]
push ecx
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
mov ecx, dword [ebp - 0x101d4]
call sym.Install_ring.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x431a53
mov edx, dword [ebp - 0x101d4]
mov dword [edx + 4], 0
mov eax, dword [ebp - 0x101d4]
mov dword [eax + 0xc], 1
cmp dword [ebp + 0xc], 0
je 0x4319f5
push 0
push 0
push 5
call dword [ebp + 0xc]
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [0x45ce08], 0
mov dword [ebp - 0x10190], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0xfd74]
call fcn.004057f0
mov byte [ebp - 4], 1
lea eax, [ebp - 0xfd70]
call fcn.004057f0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xfd78]
call fcn.004057f0
mov eax, dword [ebp - 0x10190]
jmp 0x431b85
movzx ecx, byte [ebp - 0xfd79]
test ecx, ecx
je 0x431a6b
mov edx, dword [ebp - 0x101d4]
mov dword [edx + 4], 1
cmp dword [ebp + 0xc], 0
je 0x431a84
mov eax, dword [ebp - 0xa408]
push eax
mov ecx, dword [ebp - 0xa404]
push ecx
push 2
call dword [ebp + 0xc]
lea edx, [ebp - 0xa400]
push edx
lea eax, [ebp - 0xf7f4]
push eax
push 0x44cbb0
call sym.Install_ring.exe_public:_static_class_CNsXml____cdecl_CNsXml::Instance_void_
mov ecx, eax
call sym.Install_ring.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
push str.hide
lea ecx, [ebp - 0xf7f4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x431ad5
push 0
push 0
push 0
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
call sym.Install_ring.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x431b05
push str.show
lea edx, [ebp - 0xf7f4]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x431b05
push 5
push 0
push 0
lea eax, [ebp - 0xfd70]
call fcn.00405980
push eax
call sym.Install_ring.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
mov byte [ebp - 4], 2
lea eax, [ebp - 0xfd74]
call fcn.004057f0
mov byte [ebp - 4], 1
lea eax, [ebp - 0xfd70]
call fcn.004057f0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xfd78]
call fcn.004057f0
jmp 0x43170d
cmp dword [ebp - 0xa40c], 0
jle 0x431b6d
cmp dword [ebp + 0xc], 0
je 0x431b52
push 0
push 0
push 3
call dword [ebp + 0xc]
mov ecx, dword [ebp - 0x101d4]
call sym.Install_ring.exe_private:_void___thiscall_CNsUpdate::SaveUpdateCfg_void_
mov byte [0x45ce08], 0
mov eax, 1
jmp 0x431b85
cmp dword [ebp + 0xc], 0
je 0x431b7c
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x45ce08], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041799a
mov esp, ebp
pop ebp
ret 0xc