Function at 0x41ac57
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc50
mov eax, dword [0x451220]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [edi + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 0xc4c], eax
je 0x41ac8c
xor eax, eax
inc eax
jmp 0x41b026
mov esi, edi
call fcn.0041b0c4
mov ebx, 0x410
push ebx
lea eax, [ebp - 0x418]
push 0
push eax
call fcn.00429ac0
mov eax, dword [0x455588]
add esp, 0xc
mov ecx, 0x208
lea edx, [ebp - 0x418]
call fcn.00405737
push str.deepscan360Quarant.dll
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x41b024
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41b01d
lea ecx, [ebp - 0x418]
mov dword [edi + 0x14], 1
call fcn.004114e9
mov dword [edi + 0x18], eax
test eax, eax
je 0x41b01d
push str.CreateQuarantObject
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x1c], eax
test eax, eax
je 0x41b01d
push edi
push 0x44d804
call eax
test eax, eax
jne 0x41b01d
cmp dword [edi], eax
je 0x41b01d
lea esi, [edi + 8]
push esi
push 0x44d814
call dword [edi + 0x1c]
test eax, eax
jne 0x41b01d
cmp dword [esi], eax
je 0x41b01d
push dword [ebp - 0xc40]
mov eax, edi
call fcn.0041b03c
test eax, eax
je 0x41b01d
lea esi, [edi + 4]
push esi
push 0x44d824
call dword [edi + 0x1c]
test eax, eax
jne 0x41b015
cmp dword [esi], eax
je 0x41b015
and dword [ebp - 0xc48], eax
mov eax, dword [0x453c6c]
mov esi, 0x453c6c
mov ecx, esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc44], eax
mov eax, dword [0x453c6c]
mov ecx, esi
call dword [eax + 0xc]
mov ecx, dword [ebp - 0xc4c]
add eax, 0x10
mov dword [ebp - 0xc3c], eax
call fcn.0041c8d8
test eax, eax
je 0x41ae9c
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xc44]
push eax
push 0
mov eax, ecx
jmp 0x41ae8a
inc dword [ebp - 0xc48]
xor ebx, ebx
mov dword [ebp - 0xc40], ebx
cmp dword [ebp - 0xc3c], ebx
je 0x41ae28
push dword [ebp - 0xc3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jg 0x41ae28
lea ebx, [eax + eax]
mov eax, ebx
call fcn.0042a2c0
mov esi, esp
push 3
push ebx
push dword [ebp - 0xc3c]
call fcn.0041b761
mov ebx, eax
push dword [ebp - 0xc44]
lea esi, [ebp - 0xc50]
call fcn.0041b737
mov ecx, dword [eax]
mov eax, dword [edi + 4]
mov edx, dword [eax]
lea esi, [ebp - 0xc40]
push esi
push ebx
push ecx
push eax
call dword [edx + 0x18]
push dword [ebp - 0xc50]
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test bl, bl
je 0x41ae70
mov eax, esi
push eax
lea eax, [edi + 0x24]
call fcn.0040cc89
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xc44]
push eax
push dword [ebp - 0xc48]
mov eax, dword [ebp - 0xc4c]
call fcn.0041b8e8
test eax, eax
jne 0x41ade2
jmp 0x41aff9
push ebx
xor esi, esi
lea eax, [ebp - 0xc38]
push esi
push eax
call fcn.00429ac0
add esp, 0xc
push 0x208
lea eax, [ebp - 0xc38]
push eax
push dword [0x455244]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x41aff9
lea eax, [ebp - 0xc38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xc44]
push eax
mov eax, dword [ebp - 0xc4c]
push esi
call fcn.0041b8a0
test eax, eax
je 0x41aff9
jmp 0x41af07
mov ebx, 0x410
xor esi, esi
inc dword [ebp - 0xc48]
push ebx
lea eax, [ebp - 0x828]
push esi
push eax
call fcn.00429ac0
add esp, 0xc
lea eax, [ebp - 0xc38]
mov ecx, 0x208
lea edx, [ebp - 0x828]
call fcn.00405737
push dword [ebp - 0xc44]
lea eax, [ebp - 0x828]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [ebp - 0xc40], esi
cmp dword [ebp - 0xc3c], esi
je 0x41af69
push dword [ebp - 0xc3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41af6d
xor ebx, ebx
jmp 0x41af89
lea ebx, [eax + eax]
mov eax, ebx
call fcn.0042a2c0
mov esi, esp
push 3
push ebx
push dword [ebp - 0xc3c]
call fcn.0041b761
mov ebx, eax
lea eax, [ebp - 0x828]
push eax
lea esi, [ebp - 0xc50]
call fcn.0041b737
mov ecx, dword [eax]
mov eax, dword [edi + 4]
mov edx, dword [eax]
lea esi, [ebp - 0xc40]
push esi
push ebx
push ecx
push eax
call dword [edx + 0x18]
push dword [ebp - 0xc50]
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test bl, bl
je 0x41afd2
mov eax, esi
push eax
lea eax, [edi + 0x24]
call fcn.0040cc89
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xc44]
push eax
push dword [ebp - 0xc48]
mov eax, dword [ebp - 0xc4c]
call fcn.0041b8a0
test eax, eax
jne 0x41af00
mov eax, dword [ebp - 0xc3c]
add eax, 0xfffffff0
call fcn.00406e8b
mov eax, dword [ebp - 0xc44]
add eax, 0xfffffff0
call fcn.00406e8b
xor eax, eax
inc eax
mov dword [edi + 0xc], eax
jmp 0x41b026
mov esi, edi
call fcn.0041b0c4
xor eax, eax
lea esp, [ebp - 0xc58]
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00427527
leave
ret 8