Function at 0x4b1415
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x934
mov eax, 0x5e9528
call fcn.00593b07
mov ebx, ecx
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x93c], edx
cmp esi, 2
je 0x4b144a
cmp esi, 3
je 0x4b144a
cmp esi, 4
je 0x4b144a
cmp esi, 1
jne 0x4b1884
mov eax, dword [ebx + 0x14]
xor edi, edi
mov ecx, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x4b1884
mov eax, dword [ecx + edi*4]
cmp dword [eax + 0x7c], edx
je 0x4b1479
mov eax, dword [ebx + 0x14]
inc edi
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x4b145f
jmp 0x4b1884
push esi
push 0x14d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__DownLoadCallBack_CallBackId_d
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x934]
call fcn.004b0ce3
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x4b14b7
lea ecx, [ebp - 0x934]
push ecx
push dword [ebp - 0x93c]
call eax
pop ecx
pop ecx
mov eax, dword [ebx + 0x10]
mov ecx, edi
shl ecx, 2
mov edi, dword [ecx + eax]
mov eax, dword [ebp - 0x900]
mov dword [edi + 0x84], eax
mov eax, dword [ebp - 0x904]
mov dword [edi + 0x80], eax
mov eax, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
add eax, ecx
lea ecx, [eax + 4]
sub edx, ecx
push edx
push ecx
push eax
call fcn.005aaab0
add dword [ebx + 0x14], 0xfffffffc
add esp, 0xc
cmp esi, 1
jne 0x4b153b
push esi
push edi
call fcn.004b1ab0
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer0
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea ecx, [ebp - 0x23c]
push esi
push esi
mov dl, 1
call fcn.004c6673
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
jmp 0x4b17f6
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
xor eax, eax
lea ecx, [ebp - 0x23c]
inc eax
push eax
push eax
mov dl, al
mov dword [ebp - 4], eax
call fcn.004c6673
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
push str.https:__dd.browser.360.cn_static_a_1298.3525.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x23c]
call fcn.004c6673
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
cmp dword [edi + 0x88], 1
jne 0x4b17f1
push 0x20a
lea eax, [ebp - 0x224]
push 0
push eax
call fcn.005aa3d0
add esp, 0xc
lea eax, [ebp - 0x224]
push esi
push str.https:__dd.browser.360.cn_static_a_1298.7447.gif__referer_d
push 0x104
push eax
call fcn.00412a08
add esp, 0x10
lea eax, [ebp - 0x224]
lea ecx, [ebp - 0x23c]
push eax
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x23c]
call fcn.004c6673
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
lea ecx, [ebp - 0x2ec]
call fcn.0041ed09
lea eax, [edi + 0x64]
mov dword [ebp - 4], 4
and dword [ebp - 0x244], 0
lea ecx, [ebp - 0x254]
and dword [ebp - 0x240], 0
push eax
call fcn.0040b155
lea eax, [edi + 0x1c]
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov byte [ebp - 0x935], 0
jb 0x4b1667
mov eax, dword [eax]
lea ecx, [ebp - 0x254]
push ecx
push 0x4b12d9
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041ee8c
test eax, eax
je 0x4b17a5
lea ecx, [ebp - 0x2ec]
call fcn.0041ef80
test eax, eax
je 0x4b17a5
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b17a5
cmp dword [ebp - 0x240], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x26c]
cmovae edx, dword [ebp - 0x254]
call fcn.00423490
push 0
lea edx, [edi + 0x34]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.00426889
pop ecx
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.00423c0f
pop ecx
pop ecx
push esi
test al, al
je 0x4b1732
push 0x178
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_success__d
mov byte [ebp - 0x935], 1
call fcn.0040a649
xor esi, esi
add esp, 0x10
inc esi
jmp 0x4b1764
push 0x17d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_failed__d
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0x254]
cmp dword [ebp - 0x240], 8
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x23c]
call fcn.00404812
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 5
call fcn.00404812
cmp byte [ebp - 0x935], 0
je 0x4b17a5
push 0
push edi
call fcn.004b1ab0
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer0
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 8
jmp 0x4b17b9
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer1
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 9
push 1
push 1
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.004c6673
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
call fcn.0040b67e
lea ecx, [ebp - 0x254]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.0041edd9
cmp esi, 1
jne 0x4b1839
mov edx, dword [edi + 0x8c]
sub esp, 0x18
mov ecx, esp
call fcn.00429b84
push edi
call fcn.004b217e
push esi
test al, al
je 0x4b1822
push 0x191
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackage_success__d
jmp 0x4b1831
push 0x195
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackagefailed__d
call fcn.0040a649
add esp, 0x10
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4b184f
push dword [ebp - 0x93c]
call ecx
mov eax, dword [ebx + 0xc]
pop ecx
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4b185f
push dword [ebp - 0x93c]
call eax
pop ecx
mov ecx, dword [ebx + 0x50]
test ecx, ecx
je 0x4b186c
mov eax, dword [ecx]
push edi
push esi
call dword [eax]
mov ecx, edi
call fcn.004b0f4e
push 0x90
push edi
call fcn.005926e9
pop ecx
pop ecx
mov byte [ebx + 8], 0
call fcn.00593ab1
ret 8