Function at 0x438d80
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ec92f
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebp + 8]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4397cd
push ecx
mov ecx, esi
call fcn.0043e540
mov ebx, eax
test ebx, ebx
je 0x438ddd
push ebx
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb eax, eax
and ebx, eax
push 0x270
lea eax, [ebp - 0x2c4]
push 0
push eax
call fcn.00420090
add esp, 8
lea eax, [esi + 0x14a8]
lea ecx, [ebp - 0x2c4]
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1ea
push 0x230
push str.File_Information
push str.UVK_FILE_INFO_CLASS
push eax
call fcn.005c6220
mov dword [ebp - 4], 0
test ebx, ebx
je 0x438e60
push 0
push 0
lea ecx, [ebp - 0x2c4]
call fcn.005c5730
mov edx, ebx
mov ecx, eax
call fcn.005d3010
push 0
lea ecx, [ebp - 0x2c4]
call fcn.005c5730
mov ecx, dword [esi + 0x14e4]
push eax
call fcn.005c6150
jmp 0x438e81
test byte [esi + 0x13dc], 2
je 0x438e81
push ecx
lea ecx, [esi + 0x146c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c4180
push 0xffffff
lea ecx, [ebp - 0x2c4]
call fcn.005c4720
push 0
lea ecx, [ebp - 0x2c4]
call fcn.005c44a0
push 0
push str.Arial
push 1
push 0x320
mov ecx, edi
call fcn.005d8c40
xor ecx, ecx
cmp eax, 0x32
setle cl
lea ecx, [ecx*4 + 0xc]
movd xmm1, ecx
lea ecx, [ebp - 0x2c4]
cvtdq2pd xmm1, xmm1
call fcn.005c42b0
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
push edi
lea ecx, [ebp - 0x50]
movq qword [ebp - 0x50], xmm0
call fcn.005dc570
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x28]
movq qword [ebp - 0x28], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x44]
movq qword [ebp - 0x44], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
call fcn.005dc5e0
push 1
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 4
call fcn.005dbf40
push 0xffffffffffffffff
push 0x10000101
push 0x23
push 0x1e0
push 0x14
push 0x46
lea ecx, [ebp - 0x50]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
movsd xmm1, qword [0x6edae8]
lea ecx, [ebp - 0x2c4]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffff
lea ecx, [ebp - 0x2c4]
call fcn.005c44b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x49
push 0xa
push str.File_path:
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0x46
push 0x50
push edi
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x37
push 0x45
push 0x1ef
push 0x660330
lea ecx, [ebp - 0x2c4]
call fcn.005c1a50
push 0x7f89
mov ebx, eax
push 0
mov dword [ebp - 0x2ec], ebx
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
push 0xfffffffffffffff4
push ebx
lea ecx, [ebp - 0x2c4]
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_SetClassLongW]
push ecx
push 0
push 0x624804
push str.No_publisher
lea edx, [ebp - 0x34]
mov ecx, edi
call fcn.0053fbc0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x71
push 0xa
push str.Publisher:
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0x6e
push 0x50
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x37
push 0x6d
push 0x1ef
push str.Verify
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2d4], eax
call fcn.005c1a50
push ecx
push 0
push 0x62e020
push str.No_description
lea edx, [ebp - 0x28]
mov ecx, edi
mov ebx, eax
call fcn.0053fbc0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x99
push 0xa
push 0x675de4
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0x96
push 0x50
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x37
push 0x95
push 0x1ef
push 0x660330
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2f4], eax
call fcn.005c1a50
push str.No_description
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2f0], eax
call fcn.005dc4c0
test al, al
je 0x439141
push 0x40
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c4]
call fcn.005bd3f0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0xc1
push 0xa
push str.Attributes:
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0xbe
push 0x50
lea eax, [ebp - 0x28]
push eax
push edi
call fcn.00438c70
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0xe9
push 0xa
push str.Association:
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0xe6
push 0x50
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x28]
push eax
push edi
call fcn.004389a0
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x37
push 0xe5
push 0x1ef
push 0x660330
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2fc], eax
call fcn.005c1a50
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x111
push 0xa
push str.Command:
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2f8], eax
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x1d6
push 0x10e
push 0x50
lea ecx, [ebp - 0x44]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x139
push 0xa
push str.MD5_hash:
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x10e
push 0x136
push 0x50
push str.Calculating_MD5_hash__please_wait...
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
mov ecx, edi
mov dword [ebp - 0x2e4], eax
call fcn.005e0e70
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x37
push 0x139
push 0x18b
push str.File_size:
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
call fcn.005c0890
push ecx
push 0
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2d0]
call fcn.005daea0
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x64
push 0x136
push 0x1c2
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x161
push 0xa
push str.SHA256_hash:
lea ecx, [ebp - 0x2c4]
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x1d6
push 0x15e
push 0x50
push str.Calculating_SHA256_hash__please_wait...
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x46
push 0x189
push 0xa
push str.VT_report:
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2e8], eax
call fcn.005c0890
push 0xffffffffffffffff
push 0x10000880
push 0x14
push 0x19a
push 0x186
push 0x50
push str.Press__Check__to_get_a_quick_VirusTotal_report...
lea ecx, [ebp - 0x2c4]
call fcn.005c0a40
push ecx
push 0xffffffffffffffff
push 0x16
push 0x37
push 0x185
push 0x1ef
push str.Check
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2d8], eax
call fcn.005c1a50
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push eax
push 0
push edi
push 0x800
call fcn.005db9a0
push eax
push 0
call dword [sym.imp.SHELL32.dll_ExtractAssociatedIconW]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.005c6590
sub esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c4]
push 0x20
push 0x20
push 0xf
push 0xf
push dword [ebp - 0x2e0]
call fcn.005c0b10
movsd xmm1, qword [0x6edaf8]
lea ecx, [ebp - 0x2c4]
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1b5
push 0x2d
push str.VirusTotal_report
lea ecx, [ebp - 0x2c4]
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0x78
push 0x1b5
push 0xfa
push str.File_properties
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x300], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0x64
push 0x1b5
push 0x19f
push str.Close__Esc_
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x304], eax
call fcn.005c1a50
mov ecx, 0x1b
mov dword [ebp - 0x2c8], eax
mov word [ebp - 0x18], ax
lea eax, [ebp - 0x1c]
push 1
mov word [ebp - 0x1a], cx
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 0x1c], 1
push eax
call fcn.005c47a0
push 1
push 1
lea ecx, [ebp - 0x2c4]
call fcn.005c3f80
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c4]
mov ecx, esi
push eax
call fcn.00430970
test al, al
jne 0x439797
push 0x80
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x2c4]
call fcn.005bd3f0
push 0
push ecx
push 0x8003
push dword [ebp - 0x2cc]
mov ecx, esi
push dword [ebp - 0x2d0]
push edi
call fcn.0043bb10
add esp, 4
lea ecx, [ebp - 0x2c4]
push eax
push dword [ebp - 0x2e4]
call fcn.005bcd30
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c4]
mov ecx, esi
push eax
call fcn.00430970
test al, al
jne 0x439797
push 0
push ecx
push 0x800c
push dword [ebp - 0x2cc]
mov ecx, esi
push dword [ebp - 0x2d0]
push edi
call fcn.0043bb10
add esp, 4
lea ecx, [ebp - 0x2c4]
push eax
push dword [ebp - 0x2e8]
call fcn.005bcd30
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c4]
mov ecx, esi
push eax
call fcn.00430970
test al, al
jne 0x439797
push 0
mov ecx, esi
call fcn.004771c0
test eax, eax
je 0x439797
nop dword [eax]
mov eax, dword [esi + 0x14a8]
cmp eax, 0xfffffffa
je 0x439797
lea ecx, [ebp - 0x2c4]
cmp dword [esi + 0x14d8], ecx
jne 0x439786
cmp eax, dword [ebp - 0x2ec]
jne 0x4395f8
push 2
push edi
mov ecx, esi
call fcn.0045ee00
jmp 0x439786
cmp eax, ebx
jne 0x43965e
push 0
push str.Verifying__please_wait...
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x2c4]
call fcn.005bcd30
push 0
lea edx, [ebp - 0x34]
mov ecx, edi
call fcn.005e65a0
add esp, 4
lea edx, [ebp - 0x34]
mov ecx, eax
push 1
call fcn.005e6f20
push 0
lea ecx, [ebp - 0x34]
call fcn.005dc190
push eax
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x2c4]
call fcn.005bcd30
push 0x40
push ebx
lea ecx, [ebp - 0x2c4]
call fcn.005bd3f0
jmp 0x439786
cmp eax, dword [ebp - 0x2f0]
jne 0x43966e
push dword [ebp - 0x2f4]
jmp 0x43967c
cmp eax, dword [ebp - 0x2f8]
jne 0x4396a7
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x2c4]
call fcn.005bc230
push eax
lea ecx, [ebp - 0x28]
call fcn.005dc1c0
push 2
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0045ee00
jmp 0x439786
cmp eax, dword [ebp - 0x2dc]
jne 0x439724
push 0
push str.Checking__please_wait...
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x2c4]
call fcn.005bcd30
lea ecx, [ebp - 0x28]
call fcn.005dc400
mov ecx, esi
call fcn.00435850
or eax, 8
lea ecx, [ebp - 0x28]
push eax
push 0
push 0
push 0x400
call fcn.005db9a0
push eax
mov ecx, edi
call fcn.005a9a80
push 0
lea ecx, [ebp - 0x28]
call fcn.005dc190
push eax
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x2c4]
call fcn.005bcd30
push 0x40
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2c4]
call fcn.005bd3f0
jmp 0x439786
cmp eax, dword [ebp - 0x300]
jne 0x43975b
push 0
push ecx
mov ecx, esi
call fcn.00435850
add esp, 4
or eax, 0x200
push eax
push ecx
lea ecx, [esi + 0x12c]
call fcn.005dc190
push eax
push ecx
mov edx, 0x62794c
mov ecx, edi
call fcn.005a9650
jmp 0x439786
cmp eax, dword [ebp - 0x304]
jne 0x43977e
push 0
push edi
push 2
push 0
lea ecx, [ebp - 0x2c4]
call fcn.005c5730
push eax
call dword [sym.imp.SHELL32.dll_SHObjectProperties]
jmp 0x439786
cmp eax, dword [ebp - 0x2c8]
je 0x439797
push 0
mov ecx, esi
call fcn.004771c0
test eax, eax
jne 0x4395c0
lea ecx, [ebp - 0x2e0]
call fcn.005c6580
lea ecx, [ebp - 0x34]
call fcn.005dc430
lea ecx, [ebp - 0x44]
call fcn.005dc430
lea ecx, [ebp - 0x28]
call fcn.005dc430
lea ecx, [ebp - 0x50]
call fcn.005dc430
lea ecx, [ebp - 0x2c4]
call fcn.005c1c60
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
ret 4