Function at 0x5accd0
Capabilities:
Check if file exists

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60052b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x78
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x80], ecx
mov eax, dword [ebx + 0x10]
lea ecx, [ebp - 0x20]
mov esi, dword [ebx + 8]
xorps xmm0, xmm0
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x14]
push 1
push eax
mov dword [ebp - 0x84], esi
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
call fcn.005dc570
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x50]
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
call fcn.005dc5e0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.005dc3a0
cmp eax, 0x1f
jle 0x5acd8d
sub esp, 8
lea ecx, [ebp - 0x20]
push str._A_Fa_f0_9_32_64_
call fcn.005d9930
test al, al
je 0x5acd8d
mov cl, 1
mov byte [ebp - 0x7a], cl
jmp 0x5acdc7
sub esp, 8
xor al, al
mov ecx, esi
mov byte [ebp - 0x7a], al
push str._A_Fa_f0_9_32_64_
call fcn.005d9930
test al, al
je 0x5acdc4
mov ecx, esi
call fcn.005d9fe0
mov ecx, eax
call fcn.005dc3e0
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc1c0
mov cl, byte [eax + 8]
mov byte [ebp - 0x7a], cl
jmp 0x5acdc7
mov cl, byte [ebp - 0x7a]
mov eax, dword [edi + 4]
test al, 4
jne 0x5acdd7
mov byte [ebp - 0x79], 0
cmp eax, 0x40
jne 0x5acddb
mov byte [ebp - 0x79], 1
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x1c]
test edx, 0x4000
je 0x5ace5d
push 0
push 1
push 1
push 1
and edx, 0xfffdffff
mov ecx, esi
push 0x629fdc
mov dword [eax + 0x1c], edx
call fcn.005daa70
mov dword [ebp - 0x30], eax
test eax, eax
je 0x5acfaa
lea ecx, [eax + 2]
push 0
push ecx
mov ecx, esi
call fcn.005dc190
push eax
lea ecx, [ebp - 0x20]
call fcn.005d9d20
mov eax, dword [ebp - 0x30]
mov ecx, esi
dec eax
push eax
call fcn.005dae00
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
mov esi, eax
add ecx, 0xc
call fcn.005dc190
mov edx, esi
mov ecx, eax
call fcn.005d3780
test al, al
jne 0x5ad712
jmp 0x5acfaa
test cl, cl
jne 0x5acea0
test byte [edi + 4], 1
je 0x5acea0
push 0
push 1
push 1
push 0
push 0x6278ec
mov ecx, esi
call fcn.005daa70
test eax, eax
je 0x5acea0
push 0
push 1
push 1
push 0
push 0x624a00
mov ecx, esi
call fcn.005daa70
test eax, eax
je 0x5acea0
dec eax
mov ecx, esi
push eax
call fcn.005dae00
mov eax, dword [edi + 4]
test al, 0x10
jne 0x5aceac
cmp eax, 0x40
jne 0x5aced7
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
mov esi, eax
add ecx, 0xc
call fcn.005dc190
mov edx, esi
mov ecx, eax
call fcn.005d3780
test al, al
jne 0x5ad712
mov esi, dword [ebp - 0x84]
cmp byte [ebp - 0x7a], 0
jne 0x5acf80
mov cl, byte [ebp - 0x79]
test cl, cl
je 0x5acf29
mov ecx, esi
call fcn.005dc190
mov ecx, eax
call fcn.005e0e70
test edx, edx
jg 0x5ad712
jl 0x5acf0b
cmp eax, 0x8000000
ja 0x5ad712
cmp dword [edi + 4], 0xc
jne 0x5acf26
test edx, edx
jg 0x5ad712
jl 0x5acf26
cmp eax, 0x2000000
ja 0x5ad712
mov cl, byte [ebp - 0x79]
mov eax, dword [edi + 4]
test al, 8
jne 0x5acf72
test cl, cl
jne 0x5acf38
test al, 2
je 0x5acf72
push 0
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x100
push eax
push 0
push 0
push 0x100
lea ecx, [ebp - 0x20]
call fcn.005db9a0
push eax
mov ecx, esi
call fcn.005dc190
mov edx, 0x8003
mov ecx, eax
call fcn.005e6320
test al, al
je 0x5ad5cb
mov eax, dword [edi + 4]
test al, 1
jne 0x5acfa1
cmp eax, 0xc
jne 0x5acfaa
jmp 0x5acfa1
mov eax, dword [edi + 4]
cmp eax, 0x40
je 0x5acfaa
test al, 1
jne 0x5acf95
and eax, 0xfffffffb
or eax, 2
mov dword [edi + 4], eax
lea ecx, [ebp - 0x20]
call fcn.005dbeb0
test al, al
je 0x5acfaa
push esi
lea ecx, [ebp - 0x20]
call fcn.005dc4e0
lea ecx, [ebp - 0x20]
call fcn.005dbeb0
test al, al
jne 0x5ad5cb
test byte [edi + 4], 1
mov esi, dword [ebp - 0x84]
jne 0x5acff3
mov ecx, esi
call fcn.005dc3a0
cmp eax, 3
jle 0x5ad013
lea ecx, [ebp - 0x20]
call fcn.005dc3a0
cmp eax, 0x1f
jle 0x5ad013
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005dc480
test al, al
je 0x5ad013
push 0
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
push 1
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
lea ecx, [ecx + 0x34]
call fcn.005d5f20
test dword [edi + 4], 0x20
jne 0x5ad180
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
call fcn.005a9cd0
test eax, eax
je 0x5ad180
lea ecx, [ebp - 0x50]
call fcn.005dc3a0
cmp eax, 0xa
jle 0x5ad180
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x50]
movups xmmword [ebp - 0x74], xmm0
movups xmmword [ebp - 0x64], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x74]
call fcn.005b5e70
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x2c], xmm0
call fcn.005dc5e0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 4
push eax
push str.detection_ratio
push 0
lea ecx, [ebp - 0x74]
call fcn.005b54e0
test eax, eax
je 0x5ad0c7
lea ecx, [ebp - 0x38]
call fcn.005dc3a0
cmp eax, 3
jg 0x5ad113
lea eax, [ebp - 0x38]
push eax
push str.response_code
push 0
lea ecx, [ebp - 0x74]
call fcn.005b54e0
test eax, eax
je 0x5ad119
push 0x62a118
lea ecx, [ebp - 0x38]
call fcn.005dc4c0
test al, al
je 0x5ad119
lea eax, [ebp - 0x2c]
push eax
push str.scan_date
push 0
lea ecx, [ebp - 0x74]
call fcn.005b54e0
test eax, eax
je 0x5ad119
lea ecx, [ebp - 0x2c]
call fcn.005dc3a0
cmp eax, 0xa
jle 0x5ad119
mov byte [ebp - 0x79], 2
jmp 0x5ad147
cmp dword [edi + 4], 0xc
jne 0x5ad164
lea eax, [ebp - 0x2c]
push eax
push str.permalink
push 0
lea ecx, [ebp - 0x74]
call fcn.005b54e0
test eax, eax
je 0x5ad164
lea ecx, [ebp - 0x2c]
call fcn.005dc3a0
cmp eax, 0xa
jle 0x5ad164
mov byte [ebp - 0x79], 0xfe
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
lea ecx, [ebp - 0x74]
call fcn.00401e70
jmp 0x5ad716
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.00401e70
mov eax, dword [ebp - 0x80]
test dword [eax + 0x1c], 0x20000
je 0x5ad2c8
cmp byte [ebp - 0x79], 0
je 0x5ad2c8
mov ecx, esi
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x5ad2c8
mov ecx, dword [ebp - 0x80]
add ecx, 0x84
mov dword [ebp - 0x30], ecx
call fcn.005dbeb0
test al, al
je 0x5ad1cf
push str.2db7bff719903060c3801386cf11e5ef_a2ac5113c758f8adb174a6626d589b41_4013f2dc69bdcb5f94ecf110302c4377_b6594d10a52d70b8b4a26b7e6d3d36fd_5cc1415688add8c22473168b9961e2ed_7464fae7a08c44619861f5929685f455_e2cb7f4da319cae82bf96c3cc5465208_0097a6373e08c15d83ea7b218195f0c7_9d79bee137885b1209db7ef75bce3adc_3ef26e31fe4d343ccfdf8127951c5776_7f3dc9533e7b2a18376a5dcf107a9ac8_b74ad71d1a0ac786094e9141cc3b22a3_6f83aeaf98560cf41bcdf3f9ee97b95e_d86a29f16643ac62c7651e722b215f57_31df23668bb51628e56cfa7fbaa172c2_2c015d31dee13f16666a15799992f60d_fe5ff4912bd3ad415916fa6aa8ae59e6_015f46e14625673298ba1a9fc97b6e17_2b326ccffa4c7e4f6b9f33824b605491_bfadd92fe854d21ed884d2b5aad7dee9_71f51d2e97c025359fcca5683cd4202d_4b1518564e9cc860e66ae220fd77ecb9_9be1f8397df623df5fb509f631df03d9_13b24d9d87e8ee723bbc3a2a5d701ea5_da0ff9af9331956d7bdfb163e25aa6ea_6d5702a263966c77fcd29ef99fc581c0_cec1400f0c570cbbdbe0011e793a283e_75a0a20a722a274a74ae510602cd9d52_db168dcc3116720d1e3f6901a2dc244b_ea9d73e4c205011502a463e32bc81445_a511cde06d85571d9f70fcd6f533970b_766282c322f28b12da63cc7f30e51ca4_b530fa2d4f3532aa71e7830a41dfdcac_e3522d1853cf229cb2b94eb48e475545_984190bafd54a60830bec69a45cb8aff_c36e555ff42f1d519d35f4d3c884b160_d4b9112366f96f1b1f17f0c1fdbfa3d3_723177bac65428cfd0203b98981e97b9_d9fd719904bd03603049538a332f325e_d4f040c1b4fc09c83289d5c7f1677447_b0313df7edf428441f7859b190727266_1509e4fa99316f3274dfeb929bdac300_64038f0cbc5a4be0c1443526593db0be_12d19e1161ff13bb40c99ef1b13837a7_81d2a6602f5ef40d59d792316116e90f_634a5c9ebe35c9987c37c2b791b8f4a5_783ba26ae6c1d53184d6803c60267587_abd53780ecf3934f5bc70ebf45794e9f_bad9f9308956595833fe5e4cc0255a79_f71fd1e5657a9b6bba09bc0e4649e6eb_37bf68fe0cd16ad4d442a14eabc3725d_56fb6ba7efea39fcfd7cf52801cf8f92_064c2fb9e51f72e1fc3749bc7ea49681_55cd7a62fb61ef05c089b29c8a426d9d_b0ddcf2bcca0aa4b0c7a83586023e1cb_5419ec93b99cc262051cbc1859913a7e_62febc668a12ad0dcb39f058c4c278ee_d308aef4076be53cb1594da2e7650b68_980c0325da9d466d8b9faa1cc853a1e7_aaffaf2ac79a0eba866ebd78b3f8f3be_21238d94f4f753a872658cead50340ee_a5e80cb19ba926898d66a7fa96c83ae9_0eff43adc3a82d3aee815ce794397dce_f26afc0c6edc5b8817f15cd69a174a62_0ae1b5c0cacb37c1e3e15e88854033a4_d1ebb5d853afb15e7744956dcc11ad66_b7b519fedf020e060b0a7ee27a2490df_61029f37300951af1dc5e7ce2052e92d_5f81ef5627e8538527488e50b76faec4_c992a95f25346d7978bb3be9286cb509_15b03a210874de9ecd20a706e75d9762_ac27f73707ebfefb483ea14af5534ce8_eb0ae97e773d9d634f00f342986689b2_d9b4c632225b5e89d9aeca5aad9370fa_03007b7ddd5dda9b6a3f21d900906051_80db7b5d449d9c5ff60ac2e72a876574_fef3554f08c0494cdab7a90a011d0fa7_82f2a413977902f69d6b247eabd4c7de_29a3e31a66a6710004aa9776f9799efe_b79b4f2e3ce71b482cf05623ba7ea3ed_4441c9ce6adebd3fd2d5683e9525039b_73dfb608116aea145e16de3207b5c4cf_e0f8e1a7e01e837c6da7073d3a2ac96f_170ce267971ec1c37ed5c1a493d171df_412d1594570647152860c4f7c4d74634_ea075f510ada86dc64dac80dd90c60c5_61f3160faf8ad73e5adc074017ca1e78_1fcf25110ba7941b8abc094ff7542b47_c15e8ed7769bbb5e893265ec9edac020_15f174415886beed24f216cf2aaec09b_d1727c930e48ae8180636728d2d3fe3e_412d1594570647152860c4f7c4d74634_65bdd1980ac69849cffe0a3710563015_ea075f510ada86dc64dac80dd90c60c5_9cb46986d355602d6f9a5526d4dca568_0b1ea84b95dea19f5813a67b0fb56ecf_36F971E6E6C21EF315E2E0620E3579A3_71B5A803C5C4F2936DD2B258E274164A_02FFD95AB3F673D943449119836AF176_46E4BE5E5D5512E85F206FC6672F6263_EEAE9066EEA634B32D6114136C8805EF_EBA31FD84B237ABDDA4CD9998EB2DBBD_D95CB632FCD5D332BA74EC3C221765D7_0198D0DAAF854BACE7233835405CE7DC_FE9F4026AD17023A73EDFC8ADC290718_B789D97DA5C6BEE91ED84BBD977115C9
call fcn.005dc510
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x2c], xmm0
call fcn.005dc5e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.005dc190
lea edx, [ebp - 0x44]
mov ecx, eax
call fcn.005e65a0
add esp, 4
test eax, eax
jne 0x5ad2b4
push eax
push 1
push 1
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc190
mov ecx, dword [ebp - 0x30]
push eax
call fcn.005daa70
test eax, eax
je 0x5ad2b4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.____detection_ratio_:__0_76____positives_:_0___found_:_true___total_:_76_
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
push str.__hash_:__
lea ecx, [ebp - 0x50]
call fcn.005dc200
mov ecx, dword [ebp - 0x80]
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.005abc20
test eax, eax
je 0x5ad2b4
push 0
lea ecx, [ebp - 0x20]
call fcn.005dc190
push eax
push 1
mov ecx, esi
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
lea ecx, [ecx + 0x34]
call fcn.005d5f20
test al, al
je 0x5ad2b4
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
jmp 0x5ad712
lea ecx, [ebp - 0x2c]
call fcn.005dc430
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.005dc430
mov eax, dword [edi + 4]
mov edx, dword [edi]
test al, 1
je 0x5ad2fe
test edx, edx
je 0x5ad56f
sub esp, 0xc
lea ecx, [ebp - 0x20]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x627824
call fcn.005da510
jmp 0x5ad56f
cmp eax, 0x40
jne 0x5ad5d4
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
movlpd qword [ebp - 0x34], xmm0
call fcn.005dc3e0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 7
test edx, edx
je 0x5ad333
push 0x628818
call fcn.005dc510
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6278ec
lea ecx, [ebp - 0x20]
call fcn.005da780
mov ecx, dword [ebp - 0x88]
call fcn.005d8c40
cmp eax, 5
jle 0x5ad3fe
push 1
push 0x62bd28
xorps xmm0, xmm0
push ecx
lea ecx, [ebp - 0x68]
movq qword [ebp - 0x58], xmm0
movups xmmword [ebp - 0x68], xmm0
call fcn.005d92a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62bd30
push 0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 8
call fcn.005d9220
push eax
push str._autostart_location_:__
lea ecx, [ebp - 0x20]
call fcn.005da780
lea ecx, [ebp - 0x68]
call fcn.005d9210
cmp eax, 1
jbe 0x5ad3f2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62bd30
push 1
call fcn.005d9220
push eax
push str._autostart_entry_:__
lea ecx, [ebp - 0x20]
call fcn.005da780
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 7
call fcn.005d9280
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
push dword [ebp - 0x34]
lea ecx, [ebp - 0x20]
push str._hash_:__
call fcn.005da780
mov ecx, esi
call fcn.005dc3a0
cmp eax, 3
jle 0x5ad475
push 7
push 1
push 1
push 1
push 0x624284
mov ecx, esi
call fcn.005daa70
test eax, eax
je 0x5ad475
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
mov ecx, esi
call fcn.005dc190
push eax
push str.___image_path_:__
lea ecx, [ebp - 0x20]
call fcn.005da780
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
call fcn.005dc5e0
push 0
push 0x2000000
push 3
push 0
push 1
mov byte [ebp - 4], 9
mov ecx, esi
push SysReAllocString
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.005dc190
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
or eax, 0xffffffff
test esi, esi
cmove esi, eax
mov dword [ebp - 0x78], esi
push 0
push 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x5ad51a
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x28]
call fcn.005d0520
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624388
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
push str.___creation_datetime_:__
lea ecx, [ebp - 0x20]
call fcn.005da780
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6278e8
lea ecx, [ebp - 0x20]
call fcn.005da780
cmp esi, 0xffffffff
je 0x5ad54d
test esi, esi
je 0x5ad54d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.005dc430
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x5ad569
push eax
call fcn.0041e1c3
add esp, 4
mov esi, dword [ebp - 0x84]
mov eax, dword [edi + 0xc]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x84], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x30], eax
call fcn.005dc3a0
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x78], eax
add eax, edx
mov dword [ebp - 0x88], eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x84]
cmp eax, ecx
jae 0x5ad5b6
add eax, eax
lea ecx, [edi + 8]
push eax
push edx
mov dword [ebp - 0x84], eax
call fcn.004033e0
mov edx, dword [ebp - 0x30]
mov eax, dword [edi + 0x10]
lea ecx, [ebp - 0x20]
push 0
lea eax, [eax + edx*2]
push eax
call fcn.005d8a30
test al, al
jne 0x5ad5fd
mov byte [ebp - 0x79], 0
jmp 0x5ad716
test edx, edx
je 0x5ad56f
sub esp, 0xc
lea ecx, [ebp - 0x20]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x624514
call fcn.005da510
jmp 0x5ad56f
mov eax, dword [ebp - 0x84]
lea ecx, [edi + 8]
push eax
push dword [ebp - 0x88]
call fcn.004033e0
mov ecx, dword [edi + 4]
cmp ecx, 0x40
jne 0x5ad61f
lea eax, [ecx - 0x27]
jmp 0x5ad639
cmp ecx, 0xc
jne 0x5ad629
lea eax, [ecx - 0xb]
jmp 0x5ad639
cmp ecx, 0x14
mov eax, 4
mov edx, 1
cmove eax, edx
inc dword [edi]
cmp dword [edi], eax
jb 0x5ad712
mov ecx, dword [ebp - 0x78]
xor edx, edx
add ecx, dword [ebp - 0x30]
mov eax, dword [edi + 0x10]
mov word [eax + ecx*2], dx
mov eax, dword [edi + 4]
test al, 0x20
je 0x5ad666
mov ecx, dword [ebp - 0x80]
push str.Rescanning_items_with_old_VirusTotal_reports...
jmp 0x5ad6f0
cmp eax, 0xc
jne 0x5ad6e2
xorps xmm0, xmm0
mov dword [ebp - 0x24], edx
push 1
mov ecx, esi
movq qword [ebp - 0x2c], xmm0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c]
call fcn.005dc570
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
call fcn.005dbf40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._to_VirusTotal...
lea ecx, [ebp - 0x2c]
call fcn.005dc190
push eax
push str.Uploading
lea ecx, [ebp - 0x2c]
call fcn.005dc200
lea ecx, [ebp - 0x2c]
call fcn.005dc190
mov ecx, dword [ebp - 0x80]
push eax
call fcn.005ae470
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.005dc430
jmp 0x5ad6f5
mov esi, dword [ebp - 0x80]
lea ecx, [esi + 0x78]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005ae470
mov ecx, dword [ebp - 0x80]
push 0
push edi
call fcn.005abdd0
push 0
push 0
lea ecx, [edi + 8]
call fcn.004033e0
mov dword [edi], 0
mov byte [ebp - 0x79], 1
lea ecx, [ebp - 0x50]
call fcn.005dc430
lea ecx, [ebp - 0x20]
call fcn.005dc430
mov al, byte [ebp - 0x79]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10