Function at 0x491e6e
Capabilities:
Delete file

Disassembly:
mov eax, 0x4e8cbd
call fcn.00471450
sub esp, 0x18
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
push str.http:__adsgroup.qq.com_groupmsg
call sub.MFC42.DLL_CString::operator_2
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.BasicCtrlDll.dll_class_CString___cdecl_GetExeFolder_void_]
mov esi, eax
and dword [ebp - 4], 0
mov dword [esp], str.Gad_tmp.dat
call fcn.004897b6
mov ebx, dword [ebp + 0xc]
push eax
push dword [esi]
push str._s_u_s
push ebx
call sub.MFC42.DLL_CString::Format
or dword [ebp - 4], 0xffffffff
add esp, 0x14
lea ecx, [ebp - 0x18]
call sub.MFC42.DLL_CString::CString
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, 0x4f423c
lea ecx, [ebp + 8]
push edi
call sub.MFC42.DLL_CString::CString_1
lea eax, [ebp + 8]
mov dword [ebp - 4], 1
push eax
call fcn.00495a51
test eax, eax
pop ecx
jne 0x491ef9
xor esi, esi
jmp 0x492054
push str.url_para_group
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString_1
mov ecx, dword [ebp + 0x10]
mov esi, dword [sym.imp.QQBaseClassInDll.dll_public:_int___thiscall_CHttpDownload::AddInfo_class_CString_const___class_CString_const__]
lea eax, [ebp + 8]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x14]
push eax
call esi
push 0x551864
call fcn.00491940
pop ecx
push edi
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString_1
push dword [ebp + 8]
mov edi, str._s:_s
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 3
push dword [ebp - 0x14]
push edi
push eax
call sub.MFC42.DLL_CString::Format
push dword [ebp - 0x10]
call fcn.00491940
add esp, 0x14
lea ecx, [ebp - 0x24]
call dword [sym.imp.QQHelperDll.dll_public:_void___thiscall_CHelper_CurUserData::constructor_void_]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call dword [sym.imp.QQHelperDll.dll_public:_enum_enumQQUSER_GENDER___thiscall_CHelper_CurUserData::GetGender_void_]
dec eax
je 0x491f7f
dec eax
je 0x491f78
push 0x55184c
jmp 0x491f84
push 0x551848
jmp 0x491f84
push 0x551844
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::operator_2
push str.gender
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::operator_2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x14]
push eax
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x10]
push dword [ebp - 0x14]
push edi
push eax
call sub.MFC42.DLL_CString::Format
push dword [ebp - 0x10]
call fcn.00491940
add esp, 0x14
lea ecx, [ebp - 0x24]
call dword [sym.imp.QQHelperDll.dll_public:_int___thiscall_CHelper_CurUserData::GetAge_void_]
push eax
lea eax, [ebp + 8]
push 0x54ce64
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [ebp - 0x14]
push 0x503228
call sub.MFC42.DLL_CString::operator_2
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x14]
push eax
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x10]
push dword [ebp - 0x14]
push edi
push eax
call sub.MFC42.DLL_CString::Format
push dword [ebp - 0x10]
call fcn.00491940
add esp, 0x14
lea eax, [ebp - 0x10]
push dword [ebx]
push 0x551850
push eax
call sub.MFC42.DLL_CString::Format
push dword [ebp - 0x10]
call fcn.00491940
add esp, 0x10
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call dword [sym.imp.QQHelperDll.dll_public_virtual:_void___thiscall_CHelper_CurUserData::destructor_void_]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
push 1
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc