Function at 0x4a0c60
Capabilities:
Check if file exists
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2215
mov eax, dword fs:[0]
push eax
sub esp, 0x948
mov eax, dword [0x4ec00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x93c], ecx
mov eax, dword [ebp - 0x93c]
mov byte [eax + 0x4c], 0
push 0x4cbb96
mov ecx, dword [ebp - 0x93c]
add ecx, 0x34
call fcn.004195d0
push 0x64
push 0
lea ecx, [ebp - 0x94]
push ecx
call fcn.00433ca0
add esp, 0xc
push 0
push 0
lea edx, [ebp - 0x30]
push edx
call sym.Install_adv.exe_public:_static_bool___cdecl_CNsEncrypt::GetKey_unsigned_char__const__unsigned_int__unsigned_char_const__
add esp, 0xc
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x30]
push edx
call sym.Install_adv.exe_public:_static_bool___cdecl_CNsEncrypt::HfDecodeStr_unsigned_char_const___char_const___unsigned_char__
add esp, 0xc
mov byte [ebp - 0x941], al
movzx eax, byte [ebp - 0x941]
test eax, eax
je 0x4a0d0d
mov ecx, 1
imul edx, ecx, 0xf
movsx eax, byte [ebp + edx - 0x94]
test eax, eax
je 0x4a0d14
xor al, al
jmp 0x4a11cb
lea ecx, [ebp - 0x940]
call fcn.00425b00
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
push str.key_stype_d
lea eax, [ebp - 0x940]
push eax
call fcn.00425b20
add esp, 0x10
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::constructor_void_
mov byte [ebp - 4], 1
push 0x3e8
push 3
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::SetRetry_int__int_
push 0xbb8
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::SetTimeout_unsigned_long_int_
push 0x50
push 0x1f4
lea ecx, [ebp - 0x350]
push ecx
lea ecx, [ebp - 0x940]
call fcn.00419ce0
push eax
lea ecx, [ebp - 0x940]
call fcn.00422500
push eax
mov ecx, dword [ebp - 0x93c]
add ecx, 4
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_int___thiscall_CNsNet::Post_wchar_t_const___void___int__char___int__int_
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x954], 0
jne 0x4a0df5
mov byte [ebp - 0x942], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x942]
jmp 0x4a11cb
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x350]
push eax
call fcn.004403a0
add esp, 8
test eax, eax
je 0x4a0e42
mov byte [ebp - 0x943], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x943]
jmp 0x4a11cb
mov ecx, dword [ebp - 0x93c]
add ecx, 0x14
push ecx
lea ecx, [ebp - 0x950]
call fcn.004a8200
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4a0e83
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x4d0c30
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call fcn.0043ce99
add esp, 8
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0x94c], 0
jne 0x4a0eed
mov byte [ebp - 0x944], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a8230
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x944]
jmp 0x4a11cb
mov edx, dword [ebp - 0x94c]
push edx
call fcn.0043cf8f
add esp, 4
push 0
push 0
lea eax, [ebp - 0x760]
push eax
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call sym.Install_adv.exe_int___cdecl_FileTime_wchar_t_const___struct__SYSTEMTIME___struct__SYSTEMTIME___struct__SYSTEMTIME__
add esp, 0x10
push 0xc8
push 0
lea ecx, [ebp - 0x15c]
push ecx
call fcn.00433ca0
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x94]
push eax
movzx ecx, word [ebp - 0x754]
push ecx
movzx edx, word [ebp - 0x756]
push edx
movzx eax, word [ebp - 0x758]
push eax
movzx ecx, word [ebp - 0x75a]
push ecx
movzx edx, word [ebp - 0x75e]
push edx
movzx eax, word [ebp - 0x760]
push eax
push str.NS_04d_02d_02d_02d_02d_02d_s_s
lea ecx, [ebp - 0x15c]
push ecx
call fcn.0041d3b0
add esp, 0x28
lea ecx, [ebp - 0x778]
call fcn.004197c0
mov byte [ebp - 4], 3
lea edx, [ebp - 0x778]
push edx
push 0x3f
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call sym.Install_adv.exe_public:_static_bool___cdecl_CNsEncrypt::HfEncodeStr_unsigned_char_const___unsigned_char_const___unsigned_int__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____
add esp, 0x10
lea ecx, [ebp - 0x778]
call fcn.00419510
cmp eax, 0x80
je 0x4a100e
mov byte [ebp - 0x945], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.004195f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a8230
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x945]
jmp 0x4a11cb
push 0x4d0c58
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call fcn.0043ce99
add esp, 8
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0x94c], 0
jne 0x4a1087
mov byte [ebp - 0x946], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.004195f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a8230
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x946]
jmp 0x4a11cb
mov edx, dword [ebp - 0x94c]
push edx
lea ecx, [ebp - 0x778]
call fcn.00419510
push eax
push 1
lea ecx, [ebp - 0x778]
call fcn.00419530
push eax
call fcn.0043ccbf
add esp, 0x10
mov eax, dword [ebp - 0x94c]
push eax
push 0x400
push 1
lea ecx, [ebp - 0x750]
push ecx
call fcn.0043ccbf
add esp, 0x10
mov edx, dword [ebp - 0x94c]
push edx
call fcn.0043cf8f
add esp, 4
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
mov ecx, dword [ebp - 0x93c]
call sym.Install_adv.exe_public:_bool___thiscall_CNsCode::WriteCodeEx_wchar_t_const__
movzx eax, al
test eax, eax
jne 0x4a114b
mov byte [ebp - 0x947], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.004195f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a8230
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x947]
jmp 0x4a11cb
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0x94]
cmp eax, 0x45
jne 0x4a117f
mov ecx, dword [ebp - 0x93c]
mov byte [ecx + 0x4c], 1
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x93c]
add ecx, 0x34
call fcn.004195d0
mov byte [ebp - 0x948], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.004195f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a8230
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_adv.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004199d0
mov al, byte [ebp - 0x948]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042f10e
mov esp, ebp
pop ebp
ret 8