Function at 0x470c46
Capabilities:
Delete file

Disassembly:
push 0xcc
mov eax, 0x5e2a0e
call fcn.00593b07
mov edi, ecx
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
and dword [ebp - 0xd0], 0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi]
cmp eax, 0x1388
jne 0x470c7d
lea ecx, [edi + 0x2c]
call fcn.004bb008
mov eax, dword [esi]
xor ebx, ebx
inc ebx
cmp eax, 0x835
jne 0x470d21
push 0xa33
push str.HealthMgr::OnCopyData
push str.__s__d_OnCopyData_dynamimc_wallpaper
call fcn.0040a649
add esp, 0xc
push 0
call fcn.00474d27
call fcn.004d8ad4
test al, al
jne 0x470cc8
lea ecx, [edi + 0xdc]
call fcn.0043a350
lea ecx, [edi + 0x234]
call fcn.00438860
call fcn.00475093
test al, al
je 0x470d03
push 0xa3a
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static
call fcn.0040a649
add esp, 0xc
call fcn.004d8ef6
push ecx
mov ecx, ebx
test al, al
je 0x470cf8
mov edx, ebx
jmp 0x470cfb
push 2
pop edx
call fcn.004d4fbc
pop ecx
jmp 0x470d21
push 0xa43
push str.HealthMgr::OnCopyData
push str.__s__d___recover_mouse_static_dyna
call fcn.0040a649
add esp, 0xc
mov ecx, edi
call fcn.0046bfca
mov eax, dword [esi]
cmp eax, 0x960
jne 0x470e6c
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
and dword [ebp - 4], 0
cmp dword [ebp - 0x18], 0
jne 0x470d62
lea ecx, [ebp - 0x28]
call fcn.00404812
jmp 0x471694
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0xa8]
call fcn.004d1490
sub esp, 0x18
mov byte [ebp - 4], bl
mov ecx, esp
lea eax, [ebp - 0xa8]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0xc8]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x470da6
mov eax, dword [eax]
push eax
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x470dd4
mov eax, dword [eax]
push eax
push 0xa4e
push str.HealthMgr::OnCopyData
push str.__s__d_push_msg_to_server_strMsg_s__pushMsg_s
call fcn.0040a649
add esp, 0x14
lea ecx, [ebp - 0x78]
call fcn.0040b67e
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], bl
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
je 0x470e53
lea eax, [ebp - 0xa8]
push eax
push 0x2ee1
lea ecx, [edi + 0x2c]
call fcn.004bb048
and dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x414]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x44], 0x2ee1
call fcn.0047824a
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0xa8]
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c4
jne 0x470ec7
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
push 0xa5a
push str.HealthMgr::OnCopyData
push str.__s__d_notify_hb_msg
mov dword [ebp - 4], 5
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0046a67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00404812
mov eax, dword [esi]
cmp eax, 0x9c9
jne 0x4710de
push dword [esi + 4]
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push dword [esi + 8]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 6
mov ecx, esp
lea eax, [ebp - 0x28]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x78]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x470f23
mov eax, dword [eax]
push eax
push 0xa61
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_CURSOR_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.0040b67e
push ecx
push 0x6383a8
lea ecx, [ebp - 0x28]
call fcn.00409de4
mov esi, eax
cmp esi, 0xffffffff
je 0x4710d6
push ecx
push esi
push 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.0040a02b
push ecx
push 0xffffffffffffffff
lea eax, [esi + 1]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040a02b
push ebx
push ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 9
call fcn.00456b81
pop ecx
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.004d3674
pop ecx
push 0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00404ba6
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x7c], 0x10
lea ecx, [ebp - 0x90]
mov edx, dword [ebp - 0x80]
cmovae ecx, dword [ebp - 0x90]
push eax
call fcn.004368f3
pop ecx
lea ecx, [ebp - 0x38]
call fcn.004056d7
test al, al
jne 0x471016
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
call fcn.00404812
or eax, 0xffffffff
jmp 0x471696
and dword [ebp - 0xd0], 0
push str.kind
call fcn.00405401
lea edx, [ebp - 0xd0]
mov ecx, eax
call fcn.00436e86
push 0x62e5bc
lea ecx, [ebp - 0xc8]
call fcn.004115b9
test al, al
je 0x471058
cmp dword [ebp - 0xd0], ebx
jne 0x471058
lea ecx, [edi + 0x50]
call fcn.0043f6e8
push ecx
mov edx, ebx
mov ecx, ebx
call fcn.004d4fbc
pop ecx
lea ecx, [ebp - 0x58]
call fcn.004ced2c
push str.bkinfomouse_preview_config
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa8]
call fcn.0041151f
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xa8]
call fcn.0040b67e
lea ecx, [ebp - 0x38]
call fcn.00404dbc
lea ecx, [ebp - 0x90]
call fcn.00404812
lea ecx, [ebp - 0xc8]
call fcn.00404812
lea ecx, [ebp - 0x78]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x471661
cmp eax, 0x9ca
jne 0x4712e1
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x47113a
mov eax, dword [eax]
push eax
push 0xa7c
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
je 0x4712be
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004d6f44
push 0x62d03c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.004782f9
push ecx
push 0x62a9fc
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.004782f9
cmp esi, 0xffffffff
je 0x4711f4
cmp eax, 0xffffffff
je 0x4711f4
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0x78]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x10
push eax
push ecx
mov dword [ebp - 0xd0], 0x11
call fcn.0042c53a
pop ecx
mov ecx, eax
call fcn.0042c6ac
mov byte [ebp - 0xc9], bl
test al, al
je 0x4711fb
mov byte [ebp - 0xc9], 0
mov dword [ebp - 4], 0xf
test byte [ebp - 0xd0], bl
je 0x471212
lea ecx, [ebp - 0x78]
call fcn.0040b67e
cmp byte [ebp - 0xc9], 0
je 0x47124e
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa83
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x28]
call fcn.0040b67e
lea ecx, [ebp - 0x40]
jmp 0x470d58
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004bb048
mov esi, eax
push esi
push 0xa87
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x4c], 0
add esp, 0x10
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x44], ebx
call fcn.00404698
lea eax, [ebp - 0x60]
push eax
lea ecx, [edi + 0x42c]
call fcn.0047824a
lea ecx, [ebp - 0x5c]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x4715b7
push 0x640618
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x12
call fcn.004d783b
pop ecx
lea ecx, [ebp - 0x58]
jmp 0x4715b7
cmp eax, 0x9d2
jne 0x4715c4
push dword [esi + 4]
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push dword [esi + 8]
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x13
mov ecx, esp
lea eax, [ebp - 0x40]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x47133d
mov eax, dword [eax]
push eax
push 0xa94
push str.HealthMgr::OnCopyData
push str.__s__d_hb_MSG_SEND_DOT_TO_HB_strData__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x58]
call fcn.0040b67e
cmp byte [edi + 0x41c], 0
lea ecx, [ebp - 0x78]
je 0x471557
push 0x643dc4
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.004c676c
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
call fcn.0040b67e
lea eax, [ebp - 0xc9]
mov byte [ebp - 0xc9], 0
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004d6f44
push 0x62d03c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.004782f9
push ecx
push 0x62a9fc
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.004782f9
cmp esi, 0xffffffff
je 0x471434
cmp eax, 0xffffffff
je 0x471434
sub eax, esi
lea ecx, [ebp - 0xc9]
push ecx
dec eax
lea ecx, [ebp - 0xc8]
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x18
push eax
push ecx
mov dword [ebp - 0xd0], 0x22
call fcn.0042c53a
pop ecx
mov ecx, eax
call fcn.0042c6ac
test al, al
je 0x471436
xor bl, bl
mov dword [ebp - 4], 0x17
test byte [ebp - 0xd0], 2
je 0x471451
lea ecx, [ebp - 0xc8]
call fcn.0040b67e
test bl, bl
je 0x4714d2
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0xa9d
push str.HealthMgr::OnCopyData
push str.__s__d___tcp_dot_end_by_error_sampling._url:__s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xc8]
push 0x644b50
call fcn.0040b0d5
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.004c676c
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0xc8]
call fcn.0040b67e
lea ecx, [ebp - 0x28]
call fcn.0040b67e
lea ecx, [ebp - 0x78]
jmp 0x471241
lea eax, [ebp - 0x40]
mov ebx, 0x80
push eax
push ebx
lea ecx, [edi + 0x2c]
call fcn.004bb048
mov esi, eax
push esi
push 0xaa3
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_SEND_DOT_TO_HB_send_dot_success__taskId_d
call fcn.0040a649
and dword [ebp - 0x9c], 0
add esp, 0x10
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0x94], ebx
call fcn.00404698
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x42c]
call fcn.0047824a
lea ecx, [ebp - 0xac]
call fcn.00404812
lea ecx, [ebp - 0x28]
jmp 0x4715af
push 0x644b58
call fcn.0040b0d5
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x58]
push str.https:__dd.browser.360.cn_static_a_1573.5701.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004c676c
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
call fcn.0040b67e
push 0x640618
lea ecx, [ebp - 0x58]
call fcn.0040b0d5
push ecx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
call fcn.004d783b
pop ecx
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0x78]
call fcn.0040b67e
lea ecx, [ebp - 0x40]
jmp 0x471661
cmp eax, 0x9cb
jne 0x471668
push dword [esi + 4]
and dword [ebp - 0x80], 0
lea ecx, [ebp - 0x90]
push dword [esi + 8]
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.0040464f
sub esp, 0x18
mov dword [ebp - 4], 0x1f
mov ecx, esp
lea eax, [ebp - 0x90]
push eax
and dword [ecx + 0x10], 0
and dword [ecx + 0x14], 0
call fcn.00404267
lea ecx, [ebp - 0x58]
call fcn.00430ab2
add esp, 0x18
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x14], 8
jb 0x471629
mov eax, dword [eax]
push eax
push 0xab3
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_PREVIEW_STATUS_strMsg_s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
call fcn.0046c24d
lea ecx, [ebp - 0x90]
call fcn.00404812
jmp 0x47168b
cmp eax, 0x9d0
jne 0x47168b
push 0xab7
push str.HealthMgr::OnCopyData
push str.__s__d_MSG_NOTIFY_DIGITALMAN_SHOW
call fcn.0040a649
add esp, 0xc
call fcn.004750be
mov eax, dword [ebp - 0xd8]
and dword [eax], 0
xor eax, eax
call fcn.00593ab1
ret 0x10