Function at 0x557ab0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fa30e
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0xe4], 0
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x5c], eax
jne 0x557afc
xor eax, eax
jmp 0x557cba
test ebx, ebx
je 0x557b06
mov dword [ebx], 0
push 2
call fcn.00554030
push str.Updating_TDSSKiller...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push 0
push 1
mov ecx, esi
call fcn.005494d0
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x40]
movq qword [ebp - 0x40], xmm0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movq qword [ebp - 0x1c], xmm0
call fcn.005dc5e0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [esi + 0xe4]
xorps xmm0, xmm0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.K_TdssKiller.exe
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc520
push str.https:__media.kaspersky.com_utilities_VirusUtilities_EN_tdsskiller.exe
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 2
push eax
push str.TDSSKillerUrl
mov ecx, esi
call fcn.005403a0
push 0x62439c
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push str.TDSSKillerLnk
call fcn.005403a0
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x40]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005795d0
cmp eax, 0xffffffff
jne 0x557bf6
or edi, eax
jmp 0x557ca0
push 1
lea ecx, [ebp - 0x58]
call fcn.005d0610
lea ecx, [ebp - 0x34]
xor edi, edi
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x557c8e
push str.TDSSKiller_scan...
push 0xffffffffffffffff
mov ecx, esi
call fcn.0057b610
push edi
push 1
mov ecx, esi
call fcn.005494d0
sub esp, 8
mov dword [ebp - 0x20], edi
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x28], xmm0
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push str.__accepteula__accepteulaksn
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc520
mov byte [ebp - 4], 3
mov ecx, dword [esi + 0xe4]
push 5
call fcn.005dc190
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.00579420
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x557cd8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.005dc430
push 0
push 0
push 0
push str.Failed_to_execute_the_TDSSKiller_scan.
mov ecx, esi
call fcn.0057b7e0
lea ecx, [ebp - 0x34]
call fcn.005dc430
lea ecx, [ebp - 0x1c]
call fcn.005dc430
lea ecx, [ebp - 0x40]
call fcn.005dc430
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp - 0x5c]
push 4
call fcn.005561f0
push str.__WaitWindow2_10__66__150__32770__Initialization___WaitWindow2_10__66__250__32770___Sleep_500__1___ClickWindowPos_405__214___WaitWindow2_3__18__310__32770__Error___Sleep_1000__1___ClickWindowPos_249__179___WaitWindow2_30_34_300__32770_____SaveWindow____ClickControlAt_200_340___ScanStarted____WaitProcessClose__
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push str.TDSSKillerAutomation
call fcn.005403a0
mov edi, dword [ebp + 8]
push ecx
push ebx
push edi
lea ecx, [ebp - 0x1c]
call fcn.005dc190
push eax
push dword [ebp - 0x60]
mov ecx, esi
call fcn.00577ba0
cmp eax, 0xffffffff
jne 0x557d24
lea ecx, [ebp - 0x28]
or edi, eax
call fcn.005dc430
jmp 0x557ca0
test edi, 0x800
je 0x557d50
push 0
push 0
push 0
push str.Successfully_started_the_TDSSKiller_scan._Monitoring_is_skipped_by_user_request.
mov ecx, esi
call fcn.0057b7e0
lea ecx, [ebp - 0x28]
mov edi, 1
call fcn.005dc430
jmp 0x557ca0
test ebx, ebx
je 0x557d5a
mov dword [ebx], 0
push dword [ebp - 0x5c]
push dword [ebp - 0x64]
push ecx
push 4
mov ecx, esi
call fcn.00555df0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.005dc430
xorps xmm1, xmm1
lea ecx, [ebp - 0x58]
call fcn.005d05a0
divsd xmm0, qword [0x6edbb8]
push 0
push 0x624288
lea edx, [ebp - 0x1c]
cvttsd2si edi, xmm0
mov ecx, edi
call fcn.005cf990
push eax
push str.Successfully_executed_TDSSKiller_scan._Running_time:
jmp 0x557c99