Function at 0x403110
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82c
mov eax, dword [0x4b206c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x825], 0
push 8
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.urlmon.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x40316c
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x4031b7
push 8
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.ieframe.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x4031b7
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x403204
push 8
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.wininet.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x403204
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x403251
push 8
pop eax
shl eax, 2
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
shl eax, 2
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.iertutil.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x403251
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x40329e
push 8
pop eax
imul eax, eax, 9
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
imul eax, eax, 9
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.edgehtml.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x40329e
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
je 0x403353
xor eax, eax
mov word [ebp - 0x414], ax
push 0x206
push 0
lea eax, [ebp - 0x412]
push eax
call fcn.00463e50
add esp, 0xc
push 0x103
lea eax, [ebp - 0x414]
push eax
push 0
call dword [0x4b6908]
mov dx, 0x5c
lea ecx, [ebp - 0x414]
call fcn.00402908
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0
je 0x403353
xor eax, eax
mov ecx, dword [ebp - 0x82c]
mov word [ecx], ax
call fcn.004030b4
movzx eax, al
test eax, eax
je 0x403334
lea eax, [ebp - 0x414]
push eax
push str._smshtmpad.exe
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00402918
add esp, 0x10
jmp 0x403577
lea eax, [ebp - 0x414]
push eax
push str._siexplore.exe
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00402918
add esp, 0x10
jmp 0x403577
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x4033a0
push 8
pop eax
imul eax, eax, 5
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
imul eax, eax, 5
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.iedvtool.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x4033a0
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x4033ed
push 8
pop eax
imul eax, eax, 6
push 4
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
push 8
pop eax
imul eax, eax, 6
push 4
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x4b49f0]
push eax
mov edx, dword [ebp + 8]
mov ecx, str.mshtml.dll
call fcn.00402c92
pop ecx
pop ecx
test eax, eax
je 0x4033ed
mov byte [ebp - 0x825], 1
movzx eax, byte [ebp - 0x825]
test eax, eax
je 0x403441
push 0x208
push 0
lea eax, [ebp - 0x824]
push eax
call fcn.00463e50
add esp, 0xc
mov edx, 0x104
lea ecx, [ebp - 0x824]
call fcn.00402e4c
lea eax, [ebp - 0x824]
push eax
push 0x492e48
push 0xffffffffffffffff
mov eax, dword [ebp + 0x10]
dec eax
push eax
push dword [ebp + 0xc]
call fcn.00402946
add esp, 0x14
jmp 0x403577
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x403504
push dword [ebp + 8]
push str.Xbdyy.dll
call fcn.00402bd2
pop ecx
pop ecx
test eax, eax
je 0x403504
mov byte [ebp - 0x825], 1
xor eax, eax
mov word [ebp - 0x20c], ax
push 0x206
push 0
lea eax, [ebp - 0x20a]
push eax
call fcn.00463e50
add esp, 0xc
push 0x103
lea eax, [ebp - 0x20c]
push eax
push str.Xbdyy.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [0x4b6908]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.baiduplayerbrowser.exe
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x403504
lea eax, [ebp - 0x20c]
push eax
push 0x492e48
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00402918
add esp, 0x10
jmp 0x403577
movzx eax, byte [ebp - 0x825]
test eax, eax
jne 0x403574
xor edx, edx
mov ecx, dword [ebp + 8]
call fcn.00402d2f
test eax, eax
je 0x403574
push 0x208
push 0
lea eax, [ebp - 0x61c]
push eax
call fcn.00463e50
add esp, 0xc
mov edx, 0x104
lea ecx, [ebp - 0x61c]
call fcn.00402e4c
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x403574
lea eax, [ebp - 0x61c]
push eax
push 0x492e48
push 0xffffffffffffffff
mov eax, dword [ebp + 0x10]
dec eax
push eax
push dword [ebp + 0xc]
call fcn.00402946
add esp, 0x14
jmp 0x403577
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00460c27
mov esp, ebp
pop ebp
ret