Function at 0x412640
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x4ce888
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x4ffeb0]
xor eax, esp
mov dword [esp + 0x24], eax
push ebx
push ebp
push edi
mov eax, dword [0x4ffeb0]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], ebx
mov word [esp + 0x1c], ax
lea ecx, [esp + 0x18]
push ecx
mov ecx, str.360chrome.exe
mov dword [esp + 0x44], ebx
mov byte [esp + 0x1b], bl
call fcn.00411a50
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
add esp, 4
lea ebp, [ebx + 8]
test al, al
je 0x4126cf
cmp dword [esp + 0x2c], ebx
je 0x4126cf
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x4126c1
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x4126cf
lea edx, [esp + 0x18]
push edx
jmp 0x412700
lea ebx, [esp + 0x18]
mov edx, str.DisplayIcon
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall360Chrome
call fcn.004105f0
test al, al
je 0x41271a
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x4126f4
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x41271a
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.00413af0
push 0xd
push str.360chrome.exe
mov ecx, eax
call fcn.004069f0
mov byte [esp + 0x17], 1
lea ecx, [esp + 0x18]
push ecx
mov ecx, str.360se.exe
call fcn.00411a50
add esp, 4
test al, al
je 0x41276b
cmp dword [esp + 0x2c], 0
je 0x41276b
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x412745
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x41276b
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.00413af0
push 9
push str.360se.exe
mov ecx, eax
call fcn.004069f0
mov byte [esp + 0x17], 1
lea eax, [esp + 0x18]
push eax
mov ecx, str.360se_3.exe
call fcn.00411a50
add esp, 4
test al, al
je 0x4127a4
cmp dword [esp + 0x2c], 0
je 0x4127a4
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x412796
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x4127a4
lea ecx, [esp + 0x18]
push ecx
jmp 0x4127d5
lea ebx, [esp + 0x18]
mov edx, str.DisplayIcon
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall23F3F476_BE34_4f48_9C77_2806A8393EC4
call fcn.004105f0
test al, al
je 0x4127ef
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x4127c9
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x4127ef
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.00413af0
push 0xb
push str.360se_3.exe
mov ecx, eax
call fcn.004069f0
mov byte [esp + 0x17], 1
lea eax, [esp + 0x18]
push eax
mov ecx, str.360se6.exe
call fcn.00411a50
add esp, 4
test al, al
je 0x412828
cmp dword [esp + 0x2c], 0
je 0x412828
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x41281a
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x412828
lea ecx, [esp + 0x18]
push ecx
jmp 0x412859
lea ebx, [esp + 0x18]
mov edx, str.DisplayIcon
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall360se6
call fcn.004105f0
test al, al
je 0x412873
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x41284d
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x412873
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.00413af0
push 0xa
push str.360se6.exe
mov ecx, eax
call fcn.004069f0
mov byte [esp + 0x17], 1
lea eax, [esp + 0x18]
push eax
mov ecx, str.360browser.exe
call fcn.00411a50
add esp, 4
test al, al
je 0x4128c4
cmp dword [esp + 0x2c], 0
je 0x4128c4
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x30], ebp
jae 0x41289e
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x4128c4
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.00413af0
push 0xe
push str.360browser.exe
mov ecx, eax
call fcn.004069f0
mov byte [esp + 0x17], 1
cmp dword [esp + 0x30], ebp
jb 0x4128d7
mov edx, dword [esp + 0x1c]
push edx
call fcn.0049c830
add esp, 4
mov al, byte [esp + 0x17]
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.004a0e91
add esp, 0x34
ret