Function at 0x472bc5
Capabilities:
Check if file exists
Delete file

Disassembly:
push 0x304
mov eax, 0x5e126c
call fcn.00592017
xor ebx, ebx
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 4], ebx
call fcn.00401c84
push ebx
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 1
call fcn.00404ba6
push 1
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00401d1d
test al, al
je 0x472edb
lea ecx, [ebp - 0x2f8]
call fcn.004056d7
test al, al
je 0x472edb
mov esi, 0x633a0c
push esi
call fcn.00405597
test al, al
je 0x472edb
push esi
lea ecx, [ebp - 0x2f8]
call fcn.00405401
mov ecx, eax
call fcn.00405683
test al, al
je 0x472edb
push esi
lea ecx, [ebp - 0x2f8]
call fcn.00405401
mov ecx, eax
call fcn.00405002
cmp eax, 0xc8
jne 0x472edb
mov esi, str.data
lea ecx, [ebp - 0x2f8]
push esi
call fcn.00405597
test al, al
je 0x472edb
push ebx
lea ecx, [ebp - 0x310]
call fcn.00404ba6
push esi
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 3
call fcn.00405401
push eax
lea ecx, [ebp - 0x310]
call fcn.00404e62
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x254], 0xf
mov byte [ebp - 0x268], bl
mov esi, 0x643578
mov byte [ebp - 4], 4
push esi
lea ecx, [ebp - 0x310]
call fcn.00405597
test al, al
je 0x472ec5
push esi
lea ecx, [ebp - 0x310]
call fcn.00405401
mov ecx, eax
call fcn.004056be
test al, al
je 0x472ec5
lea eax, [ebp - 0x250]
push eax
push ecx
push esi
lea ecx, [ebp - 0x310]
call fcn.00405401
pop ecx
mov ecx, eax
call fcn.00404f93
push eax
lea ecx, [ebp - 0x268]
call fcn.00409145
lea ecx, [ebp - 0x250]
call fcn.00404812
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 0x2dc], ebx
push ebx
lea edx, [ebp - 0x268]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x250]
call fcn.00426802
pop ecx
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
jb 0x472d6e
mov eax, dword [eax]
push ecx
push 0x2c
lea edx, [ebp - 0x2e4]
mov ecx, eax
call fcn.00430911
pop ecx
pop ecx
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 5
call fcn.0040b67b
mov eax, dword [ebp - 0x2e0]
mov esi, ebx
mov edi, dword [ebp - 0x2e4]
sub eax, edi
push 0x18
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x2fc], eax
test eax, eax
jle 0x472eb8
lea ecx, [ebp - 0x250]
call fcn.004251b0
mov ebx, str.360browser_bkinfo_
mov byte [ebp - 4], 7
push ebx
call fcn.005b93d0
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x250]
call fcn.0040b220
mov ebx, dword [ebp - 0x2fc]
push edi
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.004296fd
add esp, 0xc
lea eax, [ebp - 0x238]
cmp dword [ebp - 0x224], 8
cmovae eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x472e37
cmp dword [ebp - 0x224], 8
lea eax, [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x472e37
inc esi
lea ecx, [ebp - 0x238]
call fcn.0040b67b
add edi, 0x18
sub ebx, 1
jne 0x472de1
push 0x20a
lea eax, [ebp - 0x220]
push ebx
push eax
call fcn.005a88e0
add esp, 0xc
lea eax, [ebp - 0x220]
push esi
push str.https:__dd.browser.360.cn_static_a_1151.4364.gif__referer_d
push 0x104
push eax
call fcn.00412a05
add esp, 0x10
lea eax, [ebp - 0x220]
lea ecx, [ebp - 0x238]
push eax
call fcn.0040b0d5
push 1
push 1
mov dl, 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x238]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x238]
call fcn.0040b67b
lea ecx, [ebp - 0x250]
call fcn.0040b67b
lea ecx, [ebp - 0x2e4]
call fcn.004132ed
mov bl, 1
lea ecx, [ebp - 0x268]
call fcn.00404812
lea ecx, [ebp - 0x310]
call fcn.00404dbc
lea ecx, [ebp - 0x2f8]
call fcn.00404dbc
lea ecx, [ebp - 0x2d8]
call fcn.00402bc3
lea ecx, [ebp + 8]
call fcn.00404812
mov al, bl
call fcn.00591fc1
ret 0x18