Function at 0x407b80
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82c
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x407bb8
mov eax, 0x14
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 4
push edi
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x822]
push ecx
mov word [ebp - 0x824], ax
call sub.MSVCR100.dll_memset
push esi
mov esi, dword [sym.imp.MSVCR100.dll_wcscpy_s]
lea edx, [ebp - 0x824]
push 0x104
push edx
call esi
add esp, 0x18
lea eax, [ebp - 0x828]
push eax
push 0x52ee8c
push 1
push 0
push 0x52ef10
mov edi, 0x14
mov dword [ebp - 0x828], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x407ff4
mov eax, dword [ebp - 0x828]
lea edx, [ebp - 0x82c]
push edx
mov dword [ebp - 0x82c], 0
mov ecx, dword [eax]
push 0x52ef00
push eax
mov eax, dword [ecx]
call eax
test eax, eax
js 0x407fe6
mov eax, dword [ebp - 0x82c]
mov ecx, dword [eax]
push 0
lea edx, [ebp - 0x824]
push edx
push eax
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x407fe6
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x61a]
push edx
mov word [ebp - 0x61c], cx
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x828]
mov ecx, dword [eax]
add esp, 0xc
push 1
push 0
push 0x104
lea edx, [ebp - 0x61c]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x407fd8
push 0x104
lea ecx, [ebp - 0x61c]
push ecx
mov edx, ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x20a]
push ecx
mov word [ebp - 0x20c], ax
call sub.MSVCR100.dll_memset
lea edx, [ebp - 0x61c]
push 0x5c
push edx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
add esp, 0x14
test eax, eax
je 0x407fd8
add eax, 2
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call esi
mov esi, dword [sym.imp.MSVCR100.dll__wcsicmp]
lea ecx, [ebp - 0x20c]
push str.ksolaunch.exe
push ecx
call esi
add esp, 0x14
test eax, eax
je 0x407e3f
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
push 0x4c7da0
lea edx, [ebp - 0x20c]
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407eec
push 0x4c7d90
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f05
push 0x4c7d80
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f21
push 0x4c7d68
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f3d
push str.qinglaunch.exe
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f88
push str.wpscloudlaunch.exe
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f88
push str.qingbangong.exe
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
je 0x407f88
push 0x4c7ce4
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
jne 0x407df7
mov edi, 0xc
jmp 0x407fd8
push 0x4c7cc4
lea edx, [ebp - 0x20c]
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
jne 0x407e19
mov edi, 0xf
jmp 0x407fd8
push str.wpsoffice.exe
lea edx, [ebp - 0x20c]
push edx
call esi
lea ecx, [ebp - 0x20c]
cmp eax, ecx
jne 0x407fd8
mov edi, 0x12
jmp 0x407fd8
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x412]
push eax
mov word [ebp - 0x414], dx
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x828]
mov ecx, dword [eax]
add esp, 0xc
push 0x104
lea edx, [ebp - 0x414]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x407fd8
lea ecx, [ebp - 0x20c]
push 0x4c7da0
push ecx
call esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
add esp, 8
test eax, eax
jne 0x407eda
push str._w__from
lea edx, [ebp - 0x414]
push edx
call esi
lea ecx, [ebp - 0x414]
cmp eax, ecx
je 0x407ec6
push str._from
mov edx, ecx
push edx
call esi
lea ecx, [ebp - 0x414]
cmp eax, ecx
jne 0x407eda
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 4
push 0x4c7c78
lea edx, [ebp - 0x414]
push edx
call esi
test eax, eax
je 0x407ef3
xor edi, edi
jmp 0x407fd8
push 0x4c7c70
lea eax, [ebp - 0x414]
push eax
call esi
test eax, eax
je 0x407f0f
mov edi, 2
jmp 0x407fd8
push 0x4c7c64
lea ecx, [ebp - 0x414]
push ecx
call esi
test eax, eax
je 0x407f2b
mov edi, 1
jmp 0x407fd8
push 0x4c7c58
lea edx, [ebp - 0x414]
push edx
call esi
test eax, eax
je 0x407f47
mov edi, 3
jmp 0x407fd8
push 0x4c7c40
lea eax, [ebp - 0x414]
push eax
call esi
test eax, eax
jne 0x407e35
push str._qingbangong__udisk
lea ecx, [ebp - 0x414]
push ecx
call esi
test eax, eax
je 0x407f76
mov edi, 0x13
jmp 0x407fd8
push 0x4c7bfc
lea edx, [ebp - 0x414]
push edx
call esi
test eax, eax
je 0x407f8f
mov edi, 0xb
jmp 0x407fd8
push 0x4c7be8
lea eax, [ebp - 0x414]
push eax
call esi
test eax, eax
je 0x407fa8
mov edi, 0xd
jmp 0x407fd8
push 0x4c7bd4
lea ecx, [ebp - 0x414]
push ecx
call esi
test eax, eax
je 0x407fc1
mov edi, 0xe
jmp 0x407fd8
push 0x4c7bbc
lea edx, [ebp - 0x414]
push edx
call esi
test eax, eax
je 0x407fd8
mov edi, 0x11
mov eax, dword [ebp - 0x82c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x828]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop esi
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 4