Function at 0x10004760
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003231e
mov eax, dword fs:[0]
push eax
sub esp, 0xdfc
mov eax, dword [0x10048034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [ebp - 0xe04], 0
movq xmm0, qword [esi]
mov ebx, dword [sym.imp.isafepxy.dll_ISAFE_WriteProgramLog]
sub esp, 0x18
mov eax, esp
push str.false_report:__s
movq qword [eax], xmm0
movq xmm0, qword [esi + 8]
movq qword [eax + 8], xmm0
movq xmm0, qword [esi + 0x10]
push 0xffffffffffffffff
mov dword [ebp - 0xe08], edi
movq qword [eax + 0x10], xmm0
call ebx
add esp, 0x20
cmp dword [esi + 0x14], 8
jb 0x100047df
mov eax, dword [esi]
jmp 0x100047e1
mov eax, esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x10004826
cmp dword [esi + 0x14], 8
jb 0x100047f4
mov esi, dword [esi]
push esi
push str.false_report:_cant_find_configuration_file___s
push 0xffffffffffffffff
call ebx
add esp, 0xc
xor eax, eax
push eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
push 0x10036bc0
mov ecx, edi
mov word [edi], ax
call fcn.100019a0
jmp 0x10004a85
cmp dword [esi + 0x14], 8
jb 0x1000482e
mov esi, dword [esi]
push 0
push esi
lea ecx, [ebp - 0xe00]
call dword [0x10040c90]
xor eax, eax
push 0x206
mov dword [ebp - 4], 1
push eax
mov word [ebp - 0x3f4], ax
lea eax, [ebp - 0x3f2]
push eax
call sub.MSVCR110.dll_memset
mov esi, dword [0x10040c88]
add esp, 0xc
lea eax, [ebp - 0x3f4]
push 0x10036bc0
push 0x104
push eax
push str.false_file
push str.default
lea ecx, [ebp - 0xe00]
call esi
lea eax, [ebp - 0x3f4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x100048b9
lea eax, [ebp - 0x3f4]
push eax
push str.false_report:_cant_find_false_file___s
push 0xffffffffffffffff
call ebx
add esp, 0xc
push 0x10036bc0
jmp 0x10004a64
xor eax, eax
push 0x76
push eax
mov word [ebp - 0xec], ax
lea eax, [ebp - 0xea]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [ebp - 0xec]
push 0x10036bc0
push 0x3c
push eax
push str.SHA1_CODE
push str.default
lea ecx, [ebp - 0xe00]
call esi
xor eax, eax
push 0xfe
push eax
mov word [ebp - 0x1ec], ax
lea eax, [ebp - 0x1ea]
push eax
call sub.MSVCR110.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1ec]
push 0x10036bc0
push 0x80
push eax
push str.virus_name
push str.default
lea ecx, [ebp - 0xe00]
call esi
xor eax, eax
push 0x10036bc0
push 0x14
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x2a], eax
mov word [ebp - 0x26], ax
lea eax, [ebp - 0x4c]
push eax
xorps xmm0, xmm0
push str.virus_lib_date
push str.default
lea ecx, [ebp - 0xe00]
movq qword [ebp - 0x4a], xmm0
movq qword [ebp - 0x42], xmm0
movq qword [ebp - 0x3a], xmm0
movq qword [ebp - 0x32], xmm0
call esi
xor eax, eax
push 0x10036bc0
push 0x14
mov word [ebp - 0x74], ax
mov dword [ebp - 0x52], eax
mov word [ebp - 0x4e], ax
lea eax, [ebp - 0x74]
push eax
xorps xmm0, xmm0
push str.engine_version
push str.default
lea ecx, [ebp - 0xe00]
movq qword [ebp - 0x72], xmm0
movq qword [ebp - 0x6a], xmm0
movq qword [ebp - 0x62], xmm0
movq qword [ebp - 0x5a], xmm0
call esi
xor eax, eax
push 0x10036bc0
push 0xa
mov word [ebp - 0x24], ax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x24]
push eax
xorps xmm0, xmm0
push str.trust_types
push str.default
lea ecx, [ebp - 0xe00]
movq qword [ebp - 0x22], xmm0
movq qword [ebp - 0x1a], xmm0
call esi
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0xbf4], ax
lea eax, [ebp - 0xbf2]
push eax
call sub.MSVCR110.dll_memset
mov eax, dword [0x1004b0c0]
push dword [eax + 0x70]
push dword [eax + 0x6c]
push dword [eax + 0x68]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0xec]
push eax
push str.bugreportvirus.yac.mx_Report_report
push str.http:___s_SHA1_CODE_svirus_name_svirus_lib_date_sengine_version_strust_types_ssoftver_u._u._u
lea eax, [ebp - 0xbf4]
push 0x400
push eax
call dword [sym.imp.MSVCR110.dll_swprintf_s]
lea eax, [ebp - 0xbf4]
push eax
push str.OriReportFalseReport__s
push 0xffffffffffffffff
call ebx
add esp, 0x48
lea eax, [ebp - 0xbf4]
push eax
mov ecx, edi
call fcn.10001690
lea ecx, [ebp - 0xe00]
mov dword [ebp - 0xe04], 1
mov byte [ebp - 4], 0
call dword [0x10040c8c]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002f746
mov esp, ebp
pop ebp
ret