Function at 0x4b8ce8
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x934
mov eax, 0x5f22c5
call fcn.0059bbd7
mov ebx, ecx
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x93c], edx
cmp esi, 2
je 0x4b8d1d
cmp esi, 3
je 0x4b8d1d
cmp esi, 4
je 0x4b8d1d
cmp esi, 1
jne 0x4b9157
mov eax, dword [ebx + 0x14]
xor edi, edi
mov ecx, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x4b9157
mov eax, dword [ecx + edi*4]
cmp dword [eax + 0x7c], edx
je 0x4b8d4c
mov eax, dword [ebx + 0x14]
inc edi
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x4b8d32
jmp 0x4b9157
push esi
push 0x14d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__DownLoadCallBack_CallBackId_d
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0x934]
call fcn.004b85b6
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x4b8d8a
lea ecx, [ebp - 0x934]
push ecx
push dword [ebp - 0x93c]
call eax
pop ecx
pop ecx
mov eax, dword [ebx + 0x10]
mov ecx, edi
shl ecx, 2
mov edi, dword [ecx + eax]
mov eax, dword [ebp - 0x900]
mov dword [edi + 0x84], eax
mov eax, dword [ebp - 0x904]
mov dword [edi + 0x80], eax
mov eax, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
add eax, ecx
lea ecx, [eax + 4]
sub edx, ecx
push edx
push ecx
push eax
call fcn.005b2b80
add dword [ebx + 0x14], 0xfffffffc
add esp, 0xc
cmp esi, 1
jne 0x4b8e0e
push esi
push edi
call fcn.004b9383
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer0
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
and dword [ebp - 4], 0
lea ecx, [ebp - 0x23c]
push esi
push esi
mov dl, 1
call fcn.004ce396
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
jmp 0x4b90c9
push str.https:__dd.browser.360.cn_static_a_1298.4758.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
xor eax, eax
lea ecx, [ebp - 0x23c]
inc eax
push eax
push eax
mov dl, al
mov dword [ebp - 4], eax
call fcn.004ce396
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
push str.https:__dd.browser.360.cn_static_a_1298.3525.gif__referer1
lea ecx, [ebp - 0x23c]
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x23c]
call fcn.004ce396
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
cmp dword [edi + 0x88], 1
jne 0x4b90c4
push 0x20a
lea eax, [ebp - 0x224]
push 0
push eax
call fcn.005b24a0
add esp, 0xc
lea eax, [ebp - 0x224]
push esi
push str.https:__dd.browser.360.cn_static_a_1298.7447.gif__referer_d
push 0x104
push eax
call fcn.00412a13
add esp, 0x10
lea eax, [ebp - 0x224]
lea ecx, [ebp - 0x23c]
push eax
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x23c]
call fcn.004ce396
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x23c]
call fcn.0040b67e
lea ecx, [ebp - 0x2ec]
call fcn.0041ef3a
lea eax, [edi + 0x64]
mov dword [ebp - 4], 4
and dword [ebp - 0x244], 0
lea ecx, [ebp - 0x254]
and dword [ebp - 0x240], 0
push eax
call fcn.0040b155
lea eax, [edi + 0x1c]
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov byte [ebp - 0x935], 0
jb 0x4b8f3a
mov eax, dword [eax]
lea ecx, [ebp - 0x254]
push ecx
push 0x4b8bac
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041f0bd
test eax, eax
je 0x4b9078
lea ecx, [ebp - 0x2ec]
call fcn.0041f1b1
test eax, eax
je 0x4b9078
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b9078
cmp dword [ebp - 0x240], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x26c]
cmovae edx, dword [ebp - 0x254]
call fcn.004236f2
push 0
lea edx, [edi + 0x34]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.00426d6b
pop ecx
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.00423e8e
pop ecx
pop ecx
push esi
test al, al
je 0x4b9005
push 0x178
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_success__d
mov byte [ebp - 0x935], 1
call fcn.0040a649
xor esi, esi
add esp, 0x10
inc esi
jmp 0x4b9037
push 0x17d
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__http_download_failed__d
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0x254]
cmp dword [ebp - 0x240], 8
cmovae eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x23c]
call fcn.00404812
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 5
call fcn.00404812
cmp byte [ebp - 0x935], 0
je 0x4b9078
push 0
push edi
call fcn.004b9383
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer0
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 8
jmp 0x4b908c
push str.https:__dd.browser.360.cn_static_a_1298.7012.gif__referer1
lea ecx, [ebp - 0x26c]
call fcn.0040b0d5
mov byte [ebp - 4], 9
push 1
push 1
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.004ce396
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
call fcn.0040b67e
lea ecx, [ebp - 0x254]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.0041f00a
cmp esi, 1
jne 0x4b910c
mov edx, dword [edi + 0x8c]
sub esp, 0x18
mov ecx, esp
call fcn.0042ec01
push edi
call fcn.004b9a51
push esi
test al, al
je 0x4b90f5
push 0x191
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackage_success__d
jmp 0x4b9104
push 0x195
push str.P2PDownLoad::DownLoadCallBack
push str.__s__d__UnzipPackagefailed__d
call fcn.0040a649
add esp, 0x10
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x4b9122
push dword [ebp - 0x93c]
call ecx
mov eax, dword [ebx + 0xc]
pop ecx
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4b9132
push dword [ebp - 0x93c]
call eax
pop ecx
mov ecx, dword [ebx + 0x50]
test ecx, ecx
je 0x4b913f
mov eax, dword [ecx]
push edi
push esi
call dword [eax]
mov ecx, edi
call fcn.004b8821
push 0x90
push edi
call fcn.0059a7b3
pop ecx
pop ecx
mov byte [ebx + 8], 0
call fcn.0059bb81
ret 8