Function at 0x4ccdb4
Capabilities:
Delete file

Disassembly:
mov eax, 0x56ab93
call fcn.0053c1d0
sub esp, 0x1d8
mov eax, dword [0x5af710]
mov ecx, dword [0x5b096c]
push ebx
push esi
xor eax, ebp
push edi
mov dword [ebp - 0x10], eax
call fcn.004cc43c
mov dword [ebp - 0xac], eax
mov eax, dword [0x5b096c]
mov eax, dword [eax + 0x5c0]
xor esi, esi
push esi
push eax
call fcn.0053e126
cmp eax, 0xffffffff
pop ecx
pop ecx
jne 0x4cce03
mov dword [ebp - 0xac], esi
push esi
push 2
lea ecx, [ebp - 0xa8]
call fcn.00415ba7
xor edi, edi
inc edi
push edi
push 2
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 4], esi
call fcn.00404a20
mov eax, dword [0x5b096c]
mov eax, dword [eax + 0x488]
mov esi, str.AntiVirusUpdate_avupdate.xml
push esi
push 0x572ea0
push eax
lea eax, [ebp - 0x1e4]
push eax
mov byte [ebp - 4], 1
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 2
jb 0x4cce7f
mov eax, dword [eax + 4]
jmp 0x4cce82
add eax, 4
push eax
push esi
lea ecx, [ebp - 0xa8]
call fcn.00410016
mov ebx, eax
neg ebx
push 0
sbb bl, bl
push edi
lea ecx, [ebp - 0xc8]
inc bl
mov byte [ebp - 4], 1
call fcn.00402c50
test bl, bl
je 0x4cd07a
mov esi, 0x226
cmp dword [0x5b21c0], esi
jne 0x4cd073
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x164]
call fcn.00404a20
mov eax, 0x572a6c
push eax
push str.avupdate.xml_DownLoadFileInfo
push 0x572a4c
push eax
push 0x572a48
push esi
push 0x572a40
push dword [ebp - 0xb0]
mov eax, 0x572a3c
push eax
push dword [ebp - 0xb2]
mov edx, 0x572a38
push eax
push dword [ebp - 0xb4]
mov ecx, 0x572a34
push edx
push dword [ebp - 0xb6]
mov byte [ebp - 4], 3
push ecx
push dword [ebp - 0xba]
push ecx
push dword [ebp - 0xbc]
push edx
push 0x8b
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xac], esp
push str..AntivirusSoft.cpp
call fcn.00405500
lea eax, [ebp - 0xe4]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 4
jb 0x4ccf71
mov eax, dword [eax + 4]
jmp 0x4ccf74
add eax, 4
push eax
lea eax, [ebp - 0x164]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov byte [ebp - 4], 3
pop ecx
pop ecx
push 0
push edi
lea ecx, [ebp - 0xe4]
call fcn.00402c50
lea eax, [ebp - 0x164]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 1
call fcn.004028d0
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x572840
call fcn.0054dfcb
xor edi, edi
jmp 0x4cd675
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x58]
jne 0x4cd20b
mov esi, 0x226
cmp dword [0x5b21c0], esi
jne 0x4cd073
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x164]
call fcn.00404a20
mov eax, 0x572a6c
push eax
push 0x57c3d8
push 0x572a4c
push eax
push 0x572a48
push esi
push 0x572a40
push dword [ebp - 0xb0]
mov eax, 0x572a3c
push eax
push dword [ebp - 0xb2]
mov edx, 0x572a38
push eax
push dword [ebp - 0xb4]
mov ecx, 0x572a34
push edx
push dword [ebp - 0xb6]
mov byte [ebp - 4], 5
push ecx
push dword [ebp - 0xba]
push ecx
push dword [ebp - 0xbc]
push edx
push 0x91
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xac], esp
push str..AntivirusSoft.cpp
call fcn.00405500
lea eax, [ebp - 0xe4]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 6
jb 0x4cd145
mov eax, dword [eax + 4]
jmp 0x4cd148
add eax, 4
push eax
lea eax, [ebp - 0x164]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov byte [ebp - 4], 5
jmp 0x4cd032
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
jb 0x4cd228
mov eax, dword [eax + 4]
jmp 0x4cd22b
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push edi
lea ecx, [ebp - 0xe4]
call fcn.00402c50
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 7
jb 0x4cd261
mov eax, dword [eax + 4]
jmp 0x4cd264
add eax, 4
push eax
push esi
lea ecx, [ebp - 0xa8]
call fcn.00414f1a
mov ebx, eax
neg ebx
sbb bl, bl
xor esi, esi
push esi
push edi
lea ecx, [ebp - 0xe4]
inc bl
mov byte [ebp - 4], 1
call fcn.00402c50
test bl, bl
je 0x4cd41a
mov esi, 0x226
cmp dword [0x5b21c0], esi
jne 0x4cd073
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x164]
call fcn.00404a20
mov eax, 0x572a6c
push eax
push str.avupdate.xml_DownLoadFileFromServer
push 0x572a4c
push eax
push 0x572a48
push esi
push 0x572a40
push dword [ebp - 0xb0]
mov eax, 0x572a3c
push eax
push dword [ebp - 0xb2]
mov edx, 0x572a38
push eax
push dword [ebp - 0xb4]
mov ecx, 0x572a34
push edx
push dword [ebp - 0xb6]
mov byte [ebp - 4], 8
push ecx
push dword [ebp - 0xba]
push ecx
push dword [ebp - 0xbc]
push edx
push 0x98
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xac], esp
push str..AntivirusSoft.cpp
call fcn.00405500
lea eax, [ebp - 0xe4]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 9
jb 0x4cd354
mov eax, dword [eax + 4]
jmp 0x4cd357
add eax, 4
push eax
lea eax, [ebp - 0x164]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov byte [ebp - 4], 8
jmp 0x4cd032
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xa
jb 0x4cd43b
mov eax, dword [eax + 4]
jmp 0x4cd43e
add eax, 4
mov ebx, dword [ebp - 0x58]
push esi
push eax
call fcn.0050402d
pop ecx
pop ecx
push esi
cmp eax, ebx
push edi
lea ecx, [ebp - 0xe4]
setne bl
mov byte [ebp - 4], 1
call fcn.00402c50
test bl, bl
je 0x4cd664
mov esi, 0x226
cmp dword [0x5b21c0], esi
jne 0x4cd62a
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x164]
call fcn.00404a20
mov eax, 0x572a6c
push eax
push 0x57c394
push 0x572a4c
push eax
push 0x572a48
push esi
push 0x572a40
push dword [ebp - 0xb0]
mov eax, 0x572a3c
push eax
push dword [ebp - 0xb2]
mov edx, 0x572a38
push eax
push dword [ebp - 0xb4]
mov ecx, 0x572a34
push edx
push dword [ebp - 0xb6]
mov byte [ebp - 4], 0xb
push ecx
push dword [ebp - 0xba]
push ecx
push dword [ebp - 0xbc]
push edx
push 0x9e
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xac], esp
push str..AntivirusSoft.cpp
call fcn.00405500
lea eax, [ebp - 0xe4]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xc
jb 0x4cd528
mov eax, dword [eax + 4]
jmp 0x4cd52b
add eax, 4
push eax
lea eax, [ebp - 0x164]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov byte [ebp - 4], 0xb
push 0
push edi
lea ecx, [ebp - 0xe4]
call fcn.00402c50
lea eax, [ebp - 0x164]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 1
call fcn.004028d0
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x572840
call fcn.0054dfcb
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00407320
cmp dword [eax + 0x18], 0x10
jb 0x4cd647
mov eax, dword [eax + 4]
jmp 0x4cd64a
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push edi
lea ecx, [ebp - 0xe4]
call fcn.00402c50
jmp 0x4cd073
push dword [ebp - 0xac]
mov ecx, dword [0x5b096c]
call fcn.004cc3ec
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x198], 0x572840
call fcn.0054dfcb
lea ecx, [ebp - 0xa8]
call fcn.00415b7e
mov ecx, dword [ebp - 0xc]
mov eax, edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret