Function at 0x4afcde
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x934
mov eax, 0x5e7758
call fcn.00592017
mov ebx, ecx
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x93c], edx
cmp esi, 2
je 0x4afd13
cmp esi, 3
je 0x4afd13
cmp esi, 4
je 0x4afd13
cmp esi, 1
jne 0x4b014d
mov eax, dword [ebx + 0x14]
xor edi, edi
mov ecx, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x4b014d
mov eax, dword [ecx + edi*4]
cmp dword [eax + 0x7c], edx
je 0x4afd42
mov eax, dword [ebx + 0x14]
inc edi
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x4afd28
jmp 0x4b014d
push esi
push 0x14d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__DownLoadCallBack_CallBackId_d
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x934]
call fcn.004af5ac
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x4afd80
lea ecx, [ebp - 0x934]
push ecx
push dword [ebp - 0x93c]
call eax
pop ecx
pop ecx
mov eax, dword [ebx + 0x10]
mov ecx, edi
shl ecx, 2
mov edi, dword [ecx + eax]
mov eax, dword [ebp - 0x900]
mov dword [edi + 0x84], eax
mov eax, dword [ebp - 0x904]
mov dword [edi + 0x80], eax
mov eax, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
add eax, ecx
lea ecx, [eax + 4]
sub edx, ecx
push edx
push ecx
push eax
call fcn.005a8fc0
add dword [ebx + 0x14], 0xfffffffc
add esp, 0xc
cmp esi, 1
jne 0x4afe04
push esi
push edi
call fcn.004b0379
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer0
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea ecx, [ebp - 0x23c]
push esi
push esi
mov dl, 1
call fcn.004c4bab
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67b
jmp 0x4b00bf
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
xor eax, eax
lea ecx, [ebp - 0x23c]
inc eax
push eax
push eax
mov dl, al
mov dword [ebp - 4], eax
call fcn.004c4bab
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67b
push str.https:__dd.browser.360.cn_static_a_1298.3525.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x23c]
call fcn.004c4bab
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67b
cmp dword [edi + 0x88], 1
jne 0x4b00ba
push 0x20a
lea eax, [ebp - 0x224]
push 0
push eax
call fcn.005a88e0
add esp, 0xc
lea eax, [ebp - 0x224]
push esi
push str.https:__dd.browser.360.cn_static_a_1298.7447.gif__referer_d
push 0x104
push eax
call fcn.00412a05
add esp, 0x10
lea eax, [ebp - 0x224]
lea ecx, [ebp - 0x23c]
push eax
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x23c]
call fcn.004c4bab
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67b
lea ecx, [ebp - 0x2ec]
call fcn.0041ed06
lea eax, [edi + 0x64]
mov dword [ebp - 4], 4
and dword [ebp - 0x244], 0
lea ecx, [ebp - 0x254]
and dword [ebp - 0x240], 0
push eax
call fcn.0040b155
lea eax, [edi + 0x1c]
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov byte [ebp - 0x935], 0
jb 0x4aff30
mov eax, dword [eax]
lea ecx, [ebp - 0x254]
push ecx
push 0x4afba2
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041ee89
test eax, eax
je 0x4b006e
lea ecx, [ebp - 0x2ec]
call fcn.0041ef7d
test eax, eax
je 0x4b006e
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b006e
cmp dword [ebp - 0x240], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x26c]
cmovae edx, dword [ebp - 0x254]
call fcn.0042348d
push 0
lea edx, [edi + 0x34]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.00426886
pop ecx
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.00423c0c
pop ecx
pop ecx
push esi
test al, al
je 0x4afffb
push 0x178
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_success__d
mov byte [ebp - 0x935], 1
call fcn.0040a649
xor esi, esi
add esp, 0x10
inc esi
jmp 0x4b002d
push 0x17d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_failed__d
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0x254]
cmp dword [ebp - 0x240], 8
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x23c]
call fcn.00404812
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 5
call fcn.00404812
cmp byte [ebp - 0x935], 0
je 0x4b006e
push 0
push edi
call fcn.004b0379
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer0
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 8
jmp 0x4b0082
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer1
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 9
push 1
push 1
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
call fcn.0040b67b
lea ecx, [ebp - 0x254]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.0041edd6
cmp esi, 1
jne 0x4b0102
mov edx, dword [edi + 0x8c]
sub esp, 0x18
mov ecx, esp
call fcn.00429b81
push edi
call fcn.004b0a47
push esi
test al, al
je 0x4b00eb
push 0x191
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackage_success__d
jmp 0x4b00fa
push 0x195
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackagefailed__d
call fcn.0040a649
add esp, 0x10
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4b0118
push dword [ebp - 0x93c]
call ecx
mov eax, dword [ebx + 0xc]
pop ecx
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4b0128
push dword [ebp - 0x93c]
call eax
pop ecx
mov ecx, dword [ebx + 0x50]
test ecx, ecx
je 0x4b0135
mov eax, dword [ecx]
push edi
push esi
call dword [eax]
mov ecx, edi
call fcn.004af817
push 0x90
push edi
call fcn.00590bf9
pop ecx
pop ecx
mov byte [ebx + 8], 0
call fcn.00591fc1
ret 8