Function at 0x41f260
Capabilities:
Delete file

Disassembly:
push 0x58
mov eax, 0x44cd91
call fcn.0044834f
and dword [ebp - 4], 0
mov ebx, dword [ebp + 8]
mov esi, ebx
call fcn.0041f0af
push 0x4580
call fcn.00436221
pop ecx
mov edi, eax
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 1
test edi, edi
je 0x41f2c9
call fcn.0042247d
mov dword [edi], vtable.appenv::CCustomHttpClient.0
lea esi, [edi + 0x3570]
call fcn.0041f90b
cmp dword [esi + 0x1000], 0
je 0x41f2c1
mov eax, dword [esi + 0x1000]
mov byte [eax], 0
and dword [esi + 0x1004], 0
mov dword [edi], vtable.appenv::CHttpClient.0
jmp 0x41f2cb
xor edi, edi
mov byte [ebp - 4], 0
mov dword [ebx + 4], edi
lea eax, [ebp - 0x64]
call fcn.0041ec0c
cmp dword [ebx + 0x14], 1
jne 0x41f2fc
mov dword [ebp - 0x60], str.POST
mov eax, dword [ebx + 0x18]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x5c], str.application_x_www_form_urlencoded
jmp 0x41f303
mov dword [ebp - 0x60], 0x45932c
mov dword [ebp - 0x64], str.Cache_Control:_no_cache__no_store_r_n
mov eax, dword [ebx + 8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x50], eax
test byte [ebp - 0x54], 4
jne 0x41f320
or dword [ebp - 0x54], 0xb
mov dword [ebp - 0x28], 0x41f682
mov dword [ebp - 0x40], ebx
mov eax, dword [ebx + 0x1c]
cmp dword [eax - 0xc], 0
je 0x41f37b
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [ebx + 0x1c]
lea esi, [ebx + 0x38]
push 2
push 2
push 0x40000000
push eax
call fcn.0040cde0
mov dword [ebx + 0x468], eax
xor ecx, ecx
test eax, eax
setns cl
mov byte [ebp - 0x15], cl
test cl, cl
jne 0x41f37b
push eax
push str.SendRequest___open_output_file_error:_0x_x
add ebx, 0x470
call fcn.0042f50f
pop ecx
pop ecx
mov esi, dword [ebp + 8]
jmp 0x41f3cc
mov edi, dword [ebx + 0x10]
lea eax, [ebp - 0x64]
push eax
mov ebx, dword [ebx + 4]
call fcn.0041fba0
mov byte [ebp - 0x15], al
mov esi, dword [ebp + 8]
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x354c]
mov eax, dword [eax + 0x356c]
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x41f3b7
cmp ecx, 0xc8
je 0x41f3ce
push ecx
push eax
push str.navigate___ok_responsestatus:__d_httpstat:__d
jmp 0x41f3be
push ecx
push eax
push str.navigate___fail_responsestatus:__d_httpstat:__d
lea ebx, [esi + 0x470]
call fcn.0042f50f
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
cmp byte [ebp - 0x15], bl
je 0x41f545
mov eax, dword [esi + 4]
mov edi, dword [eax + 0x3554]
mov dword [ebp - 0x1c], edi
mov ecx, dword [esi + 0x20]
cmp ecx, ebx
je 0x41f402
mov eax, dword [esi + 0x28]
cmp edi, eax
jbe 0x41f402
mov edx, dword [ecx]
mov ebx, edi
sub ebx, eax
push ebx
call dword [edx + 0x58]
xor ebx, ebx
mov eax, dword [esi + 0x1c]
cmp dword [eax - 0xc], ebx
je 0x41f468
cmp dword [esi + 0x40], ebx
jbe 0x41f419
call fcn.0041f7de
mov byte [ebp - 0x15], al
jmp 0x41f468
mov dword [ebp - 0x20], ebx
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x355c]
add eax, dword [ecx + 0x3558]
add eax, dword [ecx + 0x10c8]
lea ecx, [esi + 0x38]
push edi
push eax
push ecx
lea eax, [ebp - 0x20]
call fcn.0040ce2e
mov dword [esi + 0x468], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x41f471
push eax
push str.SendRequest___write_file_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.0042f50f
pop ecx
pop ecx
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x41f545
cmp dword [esi + 0x45c], ebx
jbe 0x41f4c6
cmp dword [esi + 0x40], ebx
jne 0x41f4c6
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x355c]
add eax, dword [ecx + 0x3558]
add eax, dword [ecx + 0x10c8]
push edi
push eax
lea eax, [esi + 0x4c]
call fcn.0041ae20
mov dword [esi + 0x46c], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x41f4cb
push eax
push str.SendRequest___crypto.AddData_whole_file_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.0042f50f
pop ecx
pop ecx
xor ebx, ebx
cmp byte [ebp - 0x15], bl
je 0x41f545
mov edx, dword [esi + 0x45c]
cmp edx, ebx
jbe 0x41f545
mov eax, dword [esi + 0x458]
mov ecx, dword [esi + 0x50]
push ebx
push ebx
push ecx
push edx
push eax
push dword [esi + 0x4c]
call dword [sym.imp.ADVAPI32.dll_CryptVerifySignatureW]
test eax, eax
jne 0x41f4f7
call fcn.0040cd57
jmp 0x41f4f9
xor eax, eax
mov dword [esi + 0x46c], eax
xor ecx, ecx
cmp eax, ebx
setge cl
mov byte [ebp - 0x15], cl
cmp cl, bl
jne 0x41f545
cmp dword [esi + 0x45c], 8
jne 0x41f530
mov ecx, dword [esi + 0x458]
mov edx, 0x11111111
cmp dword [ecx], edx
jne 0x41f530
cmp dword [ecx + 4], edx
jne 0x41f530
mov byte [ebp - 0x15], 1
jmp 0x41f545
push eax
push str.SendRequest___crypto.VerifySignature_error:_0x_x
lea ebx, [esi + 0x470]
call fcn.0042f50f
pop ecx
pop ecx
xor ebx, ebx
mov dword [esi + 0x28], edi
mov eax, dword [esi + 0x1c]
cmp dword [eax - 0xc], ebx
je 0x41f561
cmp dword [esi + 0x38], ebx
je 0x41f561
push dword [esi + 0x38]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [esi + 0x38], ebx
mov esi, dword [esi + 4]
cmp esi, ebx
je 0x41f570
add esi, 4
call fcn.0041e803
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x15]
call fcn.004483f4
ret 4