Function at 0x4582ca
Capabilities:
Check if file exists

Disassembly:
push ebp
lea ebp, [esp - 0x10b8]
mov eax, 0x1138
call fcn.00465cc0
mov eax, dword [0x4b1d00]
xor eax, ebp
mov dword [ebp + 0x10b4], eax
push ebx
push esi
mov esi, ecx
push edi
push dword [esi + 0x5c]
lea ecx, [ebp - 0x6c]
call fcn.0045db69
push 0x1f7
push 0x494b54
lea ecx, [ebp - 0x6c]
call fcn.0045fcc5
mov edi, dword [esi + 0x44]
sub edi, dword [esi + 0x40]
push 0x4b84ac
lea ecx, [ebp - 0x7c]
sar edi, 2
call fcn.00401ae0
push dword [esi + 0x5c]
lea eax, [ebp - 0x7c]
push str._sdeepscanSDEng
push eax
call fcn.004028a0
add esp, 0xc
xor ebx, ebx
push ebx
push dword [0x4b6e74]
lea ecx, [ebp + 0xa94]
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsQHSafeMain.exe
call fcn.004437be
mov dword [ebp - 0x70], ebx
cmp edi, ebx
jbe 0x458449
mov dword [ebp - 0x74], ebx
mov ebx, dword [sym.imp.SHLWAPI.dll_PathCombineW]
xor eax, eax
push 0x206
push eax
mov word [ebp + 0xeac], ax
lea eax, [ebp + 0xeae]
push eax
call fcn.00464d20
add esp, 0xc
push dword [ebp - 0x70]
lea ecx, [esi + 0x34]
call fcn.0040a760
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
push 0x494ec8
lea eax, [esi + 0x58]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00404cd0
add esp, 0xc
push dword [ebp - 0x80]
push dword [eax]
lea eax, [ebp + 0xeac]
push eax
call ebx
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004016d0
xor eax, eax
push 0x206
push eax
mov word [ebp + 0xca4], ax
lea eax, [ebp + 0xca6]
push eax
call fcn.00464d20
add esp, 0xc
push dword [ebp - 0x70]
lea ecx, [esi + 0x34]
call fcn.0040a760
push dword [eax]
lea eax, [ebp + 0xca4]
push dword [ebp - 0x7c]
push eax
call ebx
lea eax, [ebp + 0xeac]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x45840d
mov dword [esi + 0x64], 0x6e
lea eax, [ebp + 0xca4]
push eax
lea eax, [ebp + 0xeac]
push eax
mov ecx, esi
call fcn.004573eb
cmp dword [esi + 0x50], 0
je 0x458439
mov eax, dword [ebp - 0x74]
xor edx, edx
div edi
push 0x5a
mov ecx, esi
push eax
call fcn.00456779
inc dword [ebp - 0x70]
add dword [ebp - 0x74], 0x5a
cmp dword [ebp - 0x70], edi
jb 0x458362
lea ecx, [ebp + 0xa94]
call fcn.0044374b
push 0x5a
push 0x5a
mov ecx, esi
call fcn.00456779
cmp dword [esi + 0x64], 0
jne 0x4584df
mov ecx, esi
call fcn.00456d28
mov ecx, esi
call fcn.00457f9d
push 0x5f
pop eax
push eax
push eax
mov ecx, esi
mov dword [ebp - 0x70], eax
call fcn.00456779
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 0x3e8
push ebx
call edi
push str.QHActiveDefense.exe
lea ecx, [ebp - 0x74]
call fcn.00404be0
and dword [ebp - 0x78], 0
push 1
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x74]
call fcn.00457ded
add esp, 0xc
cmp eax, 1
je 0x4584d4
inc dword [ebp - 0x70]
push 0x64
push dword [ebp - 0x70]
mov ecx, esi
call fcn.00456779
push ebx
call edi
mov eax, dword [ebp - 0x70]
add eax, 0xffffffa1
cmp eax, 5
jl 0x4584a1
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004016d0
cmp dword [esi + 0x50], 0
je 0x4584f0
push 0x64
push 0x64
mov ecx, esi
call fcn.00456779
cmp dword [esi + 0x64], 0
mov ecx, dword [ebp - 0x7c]
sete bl
add ecx, 0xfffffff0
call fcn.004016d0
lea ecx, [ebp - 0x6c]
call fcn.0045dbd6
mov ecx, dword [ebp + 0x10b4]
pop edi
pop esi
mov al, bl
xor ecx, ebp
pop ebx
call fcn.00464fe1
add ebp, 0x10b8
leave
ret