Function at 0x451f20
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x460423
mov eax, dword fs:[0]
push eax
mov eax, 0x101b0
call fcn.00443780
mov eax, dword [0x48200c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1018c], ecx
movzx eax, byte [0x4852cd]
test eax, eax
je 0x451f67
xor eax, eax
jmp 0x4526b8
mov byte [0x4852cd], 1
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx], 0
mov edx, dword [ebp - 0x1018c]
mov dword [edx + 8], 0
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 0xc], 0
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x26c
call fcn.0040c960
push 0x50
push 0x5000
lea ecx, [ebp - 0x5970]
push ecx
mov edx, dword [ebp + 8]
push edx
call sym.Uninstall_adv.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsNet::GetUrlInfo_wchar_t_const___char___int__int_
mov eax, dword [ebp - 0x1018c]
cmp dword [eax + 0x460], 0
je 0x451ffa
call sym.Uninstall_adv.exe_public:_static_class_CNsNet____cdecl_CNsNet::Instance_void_
mov ecx, eax
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsNet::GetInfoLen_void_
mov dword [ebp - 0x101b8], eax
mov ecx, dword [ebp - 0x101b8]
push ecx
lea edx, [ebp - 0x5970]
push edx
call sym.Uninstall_adv.exe_void___cdecl_EasyEncode_char___int_
add esp, 8
push 0x5000
lea eax, [ebp - 0xf970]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x5970]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0xf970]
push edx
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::Parse_wchar_t_const__
lea eax, [ebp - 0x3f8]
push eax
push str.Switch
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
push str.disable
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x452114
push 0xc8
push 0
lea edx, [ebp - 0x588]
push edx
call fcn.0041fb70
add esp, 0xc
lea eax, [ebp - 0x588]
push eax
push str.DMsg
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea ecx, [ebp - 0x588]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x45210d
lea ecx, [ebp - 0x10188]
call fcn.00412bf0
mov dword [ebp - 4], 0
push 1
push 9
push 8
push 0xc8
push 0x12c
push 0xa
push 0
call sym.Uninstall_adv.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
add eax, 0x212
push eax
lea edx, [ebp - 0x588]
push edx
call sym.Uninstall_adv.exe_public:_static_class_CNsApp____cdecl_CNsApp::Instance_void_
mov eax, dword [eax + 4]
push eax
lea ecx, [ebp - 0x10188]
call fcn.004132c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10188]
call fcn.00412d90
push 0
call fcn.004267c0
push 0x4732d4
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x452147
cmp dword [ebp + 0xc], 0
je 0x452139
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x4852cd], 0
xor eax, eax
jmp 0x4526b8
mov ecx, dword [ebp - 0x1018c]
call sym.Uninstall_adv.exe_private:_void___thiscall_CNsUpdate::CheckSetup_void_
lea edx, [ebp - 0x970]
push edx
push 0x4732dc
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t__
lea eax, [ebp - 0x970]
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Uninstall_adv.exe_private:_void___thiscall_CNsUpdate::CheckTask_wchar_t_const__
mov dword [ebp - 0x101b4], 0
push str.File
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeCount_wchar_t_const__
mov dword [ebp - 0x101a8], eax
cmp dword [ebp + 0xc], 0
je 0x4521c0
mov ecx, dword [ebp - 0x101a8]
push ecx
mov edx, dword [ebp - 0x101b4]
push edx
push 2
call dword [ebp + 0xc]
mov dword [ebp - 0x101ac], 0
mov dword [ebp - 0x10198], 0
mov dword [ebp - 0x101a4], 0
jmp 0x4521ef
mov eax, dword [ebp - 0x101a4]
add eax, 1
mov dword [ebp - 0x101a4], eax
mov ecx, dword [ebp - 0x101a4]
cmp ecx, dword [ebp - 0x101a8]
jge 0x45266d
mov edx, dword [ebp - 0x1018c]
cmp dword [edx], 0
je 0x452243
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx + 8], 1
cmp dword [ebp + 0xc], 0
je 0x452235
push 0
push 0
push 4
call dword [ebp + 0xc]
mov byte [0x4852cd], 0
xor eax, eax
jmp 0x4526b8
lea edx, [ebp - 0x10198]
push edx
lea eax, [ebp - 0x3f8]
push eax
push 0x4732f0
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea ecx, [ebp - 0x3f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x45227d
jmp 0x4521e0
lea edx, [ebp - 0x970]
push edx
lea ecx, [ebp - 0x101a0]
call fcn.00406d40
mov dword [ebp - 4], 1
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x101a0]
call fcn.00406c00
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push str.SavePath
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4522f4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.00406d00
jmp 0x4521e0
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x10194]
call fcn.00406d40
mov byte [ebp - 4], 2
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x10194]
call fcn.00406c00
lea eax, [ebp - 0x10198]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
push str.RealPath
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea edx, [ebp - 0x10194]
push edx
lea ecx, [ebp - 0x1019c]
call fcn.00406df0
mov byte [ebp - 4], 3
mov byte [ebp - 0x1018d], 0
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x452403
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x10
push ecx
lea ecx, [ebp - 0x1019c]
call fcn.00406c50
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x1019c]
call fcn.00406c00
mov byte [ebp - 0x1018d], 1
push 0x410
push 0
lea eax, [ebp - 0xfd80]
push eax
call fcn.0041fb70
add esp, 0xc
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
lea ecx, [ebp - 0xfd80]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x1019c]
call fcn.00406e70
push eax
lea edx, [ebp - 0xfb78]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xfd80]
push eax
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x26c
call fcn.00413670
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push str.Size
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
lea eax, [ebp - 0x3f8]
push eax
call fcn.0042a5c8
add esp, 4
mov dword [ebp - 0x101b0], eax
lea ecx, [ebp - 0x10198]
push ecx
lea edx, [ebp - 0x3f8]
push edx
push 0x473334
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
mov eax, dword [ebp - 0x101b0]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
lea ecx, [ebp - 0x1019c]
call fcn.00406e70
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x452599
push 0
mov edx, dword [ebp + 0x10]
push edx
push 0
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
lea ecx, [ebp - 0x101a0]
call fcn.00406e70
push eax
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x278
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsDownload::GetHttpFile_wchar_t_const___wchar_t_const___int__void____stdcall___int__wchar_t_const___long_long___int64___long_long___int64___double___int_
mov eax, dword [ebp - 0x101ac]
add eax, 1
mov dword [ebp - 0x101ac], eax
mov ecx, dword [ebp - 0x101b0]
push ecx
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
mov ecx, dword [ebp - 0x1018c]
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsUpdate::VerifyFile_wchar_t_const___wchar_t_const___int_
test eax, eax
jne 0x452581
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x1018c]
mov dword [ecx + 0xc], 1
cmp dword [ebp + 0xc], 0
je 0x452523
push 0
push 0
push 5
call dword [ebp + 0xc]
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [0x4852cd], 0
mov dword [ebp - 0x101bc], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1019c]
call fcn.00406d00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10194]
call fcn.00406d00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.00406d00
mov eax, dword [ebp - 0x101bc]
jmp 0x4526b8
movzx edx, byte [ebp - 0x1018d]
test edx, edx
je 0x452599
mov eax, dword [ebp - 0x1018c]
mov dword [eax + 4], 1
cmp dword [ebp + 0xc], 0
je 0x4525b2
mov ecx, dword [ebp - 0x101a8]
push ecx
mov edx, dword [ebp - 0x101b4]
push edx
push 2
call dword [ebp + 0xc]
lea eax, [ebp - 0x10198]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
push 0x47333c
mov ecx, dword [ebp - 0x1018c]
add ecx, 0x45c
call sym.Uninstall_adv.exe_public:_int___thiscall_CNsXml::GetXmlNodeValue_wchar_t_const___wchar_t___int__
push str.hide
lea edx, [ebp - 0x3f8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x452608
push 0
push 0
push 0
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
call sym.Uninstall_adv.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
jmp 0x452638
push str.show
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x452638
push 5
push 0
push 0
lea ecx, [ebp - 0x10194]
call fcn.00406e70
push eax
call sym.Uninstall_adv.exe_int___cdecl_DoRun_wchar_t_const___wchar_t_const___int__int_
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1019c]
call fcn.00406d00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10194]
call fcn.00406d00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x101a0]
call fcn.00406d00
jmp 0x4521e0
cmp dword [ebp - 0x101ac], 0
jle 0x4526a0
cmp dword [ebp + 0xc], 0
je 0x452685
push 0
push 0
push 3
call dword [ebp + 0xc]
mov ecx, dword [ebp - 0x1018c]
call sym.Uninstall_adv.exe_private:_void___thiscall_CNsUpdate::SaveUpdateCfg_void_
mov byte [0x4852cd], 0
mov eax, 1
jmp 0x4526b8
cmp dword [ebp + 0xc], 0
je 0x4526af
push 0
push 0
push 1
call dword [ebp + 0xc]
mov byte [0x4852cd], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e140
mov esp, ebp
pop ebp
ret 0xc