Function at 0x41f0b0
Capabilities:
Check if file exists
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc380
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x505070]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
push dword [ebx]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41f496
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0
push eax
push ebx
call fcn.0041fd30
test eax, eax
jne 0x41f11f
xor esi, esi
jmp 0x41f48c
call fcn.00405a90
mov ecx, eax
test ecx, ecx
jne 0x41f134
push 0x80004005
call fcn.00405cb0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 1
call fcn.00405a90
mov ecx, eax
test ecx, ecx
jne 0x41f158
push 0x80004005
call fcn.00405cb0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x3c], eax
push str..zip
mov edx, ebx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.004080b0
push ecx
mov byte [ebp - 4], 3
push dword [ebp - 0x2c]
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov edx, eax
lea ecx, [ebp - 0x20]
call fcn.0046ed00
add esp, 8
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00403c60
mov byte [ebp - 4], 3
or esi, 0xffffffff
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f1bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0041f5d0
mov edi, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x30]
test eax, eax
je 0x41f430
cmp dword [ebx - 0xc], 0
je 0x41f430
cmp dword [edi - 0xc], 0
je 0x41f430
lea ecx, [ebp - 0x34]
call fcn.00405b40
mov eax, 0x40
mov byte [ebp - 4], 5
call fcn.004a03d0
mov ecx, esp
mov edx, str.XunduBoundary0xKhTSLbOuNdCrY
push 3
push 0x3a
call fcn.00420460
push eax
lea eax, [ebp - 0x34]
push str._r_n___s___r_n
push eax
call fcn.00420380
mov eax, edi
add esp, 0xc
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41f230
sub eax, edx
sar eax, 1
lea esi, [eax + 1]
cmp esi, 0x3fffffff
jle 0x41f24e
xor eax, eax
jmp 0x41f263
add esi, esi
mov eax, esi
call fcn.0049fd70
mov ecx, esp
mov edx, edi
push 3
push esi
call fcn.00420460
push eax
lea ecx, [ebp - 0x28]
call fcn.0041fee0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x4c]
mov ecx, dword [eax - 0xc]
mov eax, dword [esi - 0xc]
add eax, edx
mov dword [ebp - 0x1c], edx
add eax, ecx
push eax
mov dword [ebp - 0x24], eax
call fcn.0049f8a4
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], ecx
push dword [eax - 0xc]
push eax
push ecx
call fcn.004a2490
mov eax, dword [ebp - 0x28]
add esp, 0xc
push dword [ebp - 0x1c]
mov eax, dword [eax - 0xc]
push dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
add eax, dword [ebp - 0x18]
push eax
call fcn.004a2490
mov eax, dword [ebp - 0x20]
add esp, 0xc
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
push dword [esi - 0xc]
push esi
push eax
call fcn.004a2490
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.00405b40
push str.POST
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.00405360
lea ecx, [ebp - 0x38]
call fcn.00405b40
mov esi, eax
lea ecx, [ebp - 0x64]
call fcn.00405b40
push esi
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x54]
call fcn.00402080
add esp, 0xc
lea ecx, [ebp - 0x64]
call fcn.004057f0
lea ecx, [ebp - 0x38]
call fcn.004057f0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.004057f0
push str.XunduBoundary0xKhTSLbOuNdCrY
push str.multipart_form_data__boundary_s
lea eax, [ebp - 0x1c]
push eax
call fcn.00408f50
add esp, 0xc
lea ecx, [ebp - 0x20]
push str.Content_Type
call fcn.00405360
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ecx + 0x28]
call fcn.00469d20
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xe
call fcn.004057f0
push dword [ebp - 0x24]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x54]
push esi
call fcn.0046a8b0
push esi
call fcn.0049f89f
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
push ecx
push 0
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x60]
mov ecx, dword [ebp - 0x54]
push 0
push 0
call fcn.004843e0
mov esi, dword [ebp - 0x60]
add esp, 0x14
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x5c]
sub eax, esi
mov dword [ebp - 0x24], eax
call fcn.00405a90
push eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x24]
push esi
call fcn.0040f330
cmp dword [ebp - 0x38], 0
je 0x41f3f4
mov eax, dword [ebp + 8]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x18], 1
call fcn.004057f0
lea ecx, [ebp - 0x60]
call fcn.00403bf0
lea ecx, [ebp - 0x54]
call fcn.00403770
lea ecx, [ebp - 0x1c]
call fcn.004057f0
lea ecx, [ebp - 0x28]
call fcn.004057f0
lea ecx, [ebp - 0x34]
call fcn.004057f0
or esi, 0xffffffff
jmp 0x41f437
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 2
mov eax, esi
mov edx, dword [ebp - 0x2c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41f455
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41f470
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add ebx, 0xfffffff0
lock xadd dword [ebx + 0xc], esi
dec esi
test esi, esi
jg 0x41f489
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov esi, dword [ebp - 0x18]
lea ecx, [ebp - 0x4c]
call fcn.00403bf0
mov eax, esi
lea esp, [ebp - 0x74]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0049f1b4
mov esp, ebp
pop ebp
ret 4