Function at 0x4c23f0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x850
mov eax, dword [ebp + 8]
mov eax, dword [0x5f3418]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x844], edx
mov dword [ebp - 0x83c], ecx
mov byte [ebp - 0x831], 0xff
mov byte [ebp - 0x831], 0
mov edx, dword [ebp - 0x83c]
lea ecx, str.urlmon.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 8
add eax, 0xc
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c2455
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
jne 0x4c2490
mov edx, dword [ebp - 0x83c]
lea ecx, str.ieframe.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x10
add eax, 0x14
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c2490
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
jne 0x4c24cb
mov edx, dword [ebp - 0x83c]
lea ecx, str.wininet.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x18
add eax, 0x1c
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c24cb
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
jne 0x4c2506
mov edx, dword [ebp - 0x83c]
lea ecx, str.iertutil.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x20
add eax, 0x24
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c2506
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
jne 0x4c2541
mov edx, dword [ebp - 0x83c]
lea ecx, str.edgehtml.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x48
add eax, 0x4c
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c2541
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
je 0x4c2668
lea eax, [ebp - 0x218]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x208
call fcn.005191b0
mov ecx, dword [0x5f8434]
lea esi, [ebp - 0x218]
call dword [section..00cfg]
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], esi
mov dword [esp + 8], 0x103
call ecx
sub esp, 0xc
mov eax, 0xffffffff
mov dword [ebp - 0x848], eax
lea ecx, [ebp - 0x218]
call fcn.004c2ae0
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 0
je 0x4c264f
mov eax, dword [ebp - 0x848]
mov word [eax], 0
call fcn.004c2360
test al, 1
jne 0x4c25d9
jmp 0x4c2614
lea eax, [ebp - 0x218]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x844]
lea esi, str._smshtmpad.exe
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.0054f030
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x838], 1
jmp 0x4c2659
lea eax, [ebp - 0x218]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x844]
lea esi, str._siexplore.exe
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.0054f030
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x838], 1
jmp 0x4c2659
mov dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0
jne 0x4c2962
jmp 0x4c2668
test byte [ebp - 0x831], 1
jne 0x4c26a3
mov edx, dword [ebp - 0x83c]
lea ecx, str.iedvtool.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x28
add eax, 0x2c
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c26a3
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
jne 0x4c26de
mov edx, dword [ebp - 0x83c]
lea ecx, str.mshtml.dll
lea eax, [0x5f83e0]
mov esi, eax
add esi, 0x30
add eax, 0x34
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004c2980
cmp eax, 0
je 0x4c26de
mov byte [ebp - 0x831], 1
test byte [ebp - 0x831], 1
je 0x4c275b
lea eax, [ebp - 0x420]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x208
call fcn.005191b0
lea ecx, [ebp - 0x420]
call fcn.004c2330
lea eax, [ebp - 0x420]
mov ecx, dword [ebp + 8]
sub ecx, 1
mov edx, dword [ebp - 0x844]
lea esi, [0x5d847a]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0054f090
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x838], 1
jmp 0x4c2962
test byte [ebp - 0x831], 1
jne 0x4c2890
mov edx, dword [ebp - 0x83c]
lea ecx, [0x5d8480]
call fcn.004c2af0
cmp eax, 0
je 0x4c2890
mov byte [ebp - 0x831], 1
lea eax, [ebp - 0x628]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x208
call fcn.005191b0
mov esi, dword [0x5f8434]
lea ebx, [ebp - 0x628]
lea eax, [0x5d8480]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
sub esp, 4
mov edi, eax
mov ecx, esi
call dword [section..00cfg]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x103
call esi
sub esp, 0xc
lea eax, [ebp - 0x628]
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
sub esp, 4
lea eax, [ebp - 0x628]
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
sub esp, 4
lea eax, [ebp - 0x628]
lea ecx, str.baiduplayerbrowser.exe
mov dword [esp], eax
mov dword [esp + 4], ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
sub esp, 8
lea eax, [ebp - 0x628]
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
sub esp, 4
cmp eax, 0
je 0x4c2877
lea eax, [ebp - 0x628]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x844]
lea esi, [0x5d847a]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
call fcn.0054f030
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x838], 1
jmp 0x4c2881
mov dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0
jne 0x4c2962
jmp 0x4c2890
test byte [ebp - 0x831], 1
jne 0x4c294e
mov ecx, dword [ebp - 0x83c]
call fcn.004c2bd0
cmp eax, 0
je 0x4c294e
lea eax, [ebp - 0x830]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x208
call fcn.005191b0
lea ecx, [ebp - 0x830]
call fcn.004c2330
lea eax, [ebp - 0x830]
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
sub esp, 4
cmp eax, 0
je 0x4c2939
lea eax, [ebp - 0x830]
mov ecx, dword [ebp + 8]
sub ecx, 1
mov edx, dword [ebp - 0x844]
lea esi, [0x5d847a]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], eax
call fcn.0054f090
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x838], 1
jmp 0x4c2943
mov dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0
jne 0x4c2962
jmp 0x4c294e
mov dword [ebp - 0x840], 0xffffffff
mov dword [ebp - 0x838], 1
mov esi, dword [ebp - 0x840]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00512ee3
mov eax, esi
add esp, 0x850
pop esi
pop edi
pop ebx
pop ebp
ret