Function at 0x557460
Capabilities:
Check if file exists
Check internet connectivity via wininet

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fa26e
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0xe4], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
jne 0x5574a9
xor eax, eax
jmp 0x5577a8
test eax, eax
je 0x5574b3
mov dword [eax], 0
push 2
call fcn.00554030
push str.Updating_Avast__aswMBR...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push 0
push 1
mov ecx, esi
call fcn.005494d0
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movq qword [ebp - 0x1c], xmm0
call fcn.005dc5e0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [esi + 0xe4]
xorps xmm0, xmm0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x20], 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Avast_aswMBR.exe.exe
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc520
push str.https:__files.avast.com_files_rootkit_scanner_aswmbr.exe
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
push str.AswMBRUrl
mov ecx, esi
call fcn.005403a0
push 0x62439c
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push str.AswMBRLnk
call fcn.005403a0
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005795d0
cmp eax, 0xffffffff
je 0x557777
push 1
lea ecx, [ebp - 0x50]
call fcn.005d0610
lea ecx, [ebp - 0x28]
xor edi, edi
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x55777c
push str.Avast__aswMBR_scan...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push edi
push 1
mov ecx, esi
call fcn.005494d0
mov ecx, dword [esi + 0xe4]
push 5
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.00579420
mov ebx, eax
mov dword [ebp - 0x5c], ebx
test ebx, ebx
je 0x55777c
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x55760f
mov dword [eax], ebx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2c], edi
test al, 1
je 0x557630
push 0
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x54], eax
test al, 1
mov eax, str._CLASS:Button__INSTANCE:2_
mov ecx, str._CLASS:Button__INSTANCE:1_
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.005dc510
xor edi, edi
mov dword [ebp - 0x58], edi
lea ecx, [edi + 3]
nop
push 0
push 0
push 0
test edi, edi
mov eax, 0xa
push 3
cmovne eax, ecx
mov ecx, esi
push eax
push ebx
call fcn.00547500
mov ebx, eax
test ebx, ebx
je 0x5576b4
mov ecx, ebx
call fcn.005ce0d0
cmp eax, 0x12c
jle 0x557683
mov edi, ebx
jmp 0x5576b4
test edi, edi
je 0x557691
lea ecx, [ebp - 0x1c]
call fcn.005dc190
jmp 0x557696
mov eax, str._CLASS:Button__INSTANCE:2_
sub esp, 0xc
mov ecx, esi
push 2
push eax
call fcn.005470d0
push 2
push 0
push 0x10
mov ecx, esi
call fcn.00547130
test edi, edi
jne 0x5576cc
mov eax, dword [ebp - 0x58]
mov ecx, 3
mov ebx, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x58], eax
cmp eax, 4
jl 0x557650
test edi, edi
je 0x5576ee
mov edx, str._CLASS:Button__INSTANCE:1_
mov ecx, edi
call fcn.005cbb50
test eax, eax
je 0x5576ee
push 5
push 0xa
push 1
mov edx, str.main
mov ecx, eax
call fcn.005cda70
test dword [ebp - 0x54], 0x800
je 0x557710
push 0
push 0
push 0
push str.Successfully_started_the_Avast__aswMBR_scan._Monitoring_is_skipped_by_user_request.
mov ecx, esi
call fcn.0057b7e0
mov edi, 1
jmp 0x55778e
mov edi, dword [ebp - 0x5c]
mov ecx, edi
call fcn.005cc910
test al, al
je 0x55773a
nop
push 0
push 0
mov ecx, esi
call fcn.005494d0
test eax, eax
jne 0x557777
mov ecx, edi
call fcn.005cc910
test al, al
jne 0x557720
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x557747
mov dword [eax], 0
xorps xmm1, xmm1
lea ecx, [ebp - 0x50]
call fcn.005d05a0
divsd xmm0, qword [0x6edbb8]
push 0
push 0x624288
lea edx, [ebp - 0x1c]
cvttsd2si edi, xmm0
mov ecx, edi
call fcn.005cf990
push eax
push str.Successfully_executed_Avast__aswMBR_scan._Running_time:
jmp 0x557787
or edi, 0xffffffff
jmp 0x55778e
push 0
push 0
push 0
push str.Failed_to_execute_the_Avast__aswMBR_scan.
mov ecx, esi
call fcn.0057b7e0
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x1c]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 8