Function at 0x406bb0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa48
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
lea ecx, [ebp - 0xa48]
xor eax, eax
push ecx
mov ecx, 0x51c620
mov ebx, str.SoftwareMicrosoftWindowsCurrentVersionApp_Paths360safe.exe
mov edi, reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0xa30], 7
mov dword [ebp - 0xa34], 0
mov word [ebp - 0xa44], ax
call fcn.00408730
add esp, 4
test eax, eax
jne 0x406c2e
cmp dword [ebp - 0xa30], 8
jb 0x406c1c
mov edx, dword [ebp - 0xa44]
push edx
call fcn.004c097a
add esp, 4
pop edi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0xa34], 0
push esi
mov ebx, 8
je 0x406e45
mov eax, dword [ebp - 0xa44]
cmp dword [ebp - 0xa30], ebx
jae 0x406c55
lea eax, [ebp - 0xa44]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push eax
call edi
test eax, eax
je 0x406e45
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x61a]
push ecx
mov word [ebp - 0x61c], ax
call fcn.004c5470
mov eax, dword [ebp - 0xa44]
add esp, 0xc
cmp dword [ebp - 0xa30], ebx
jae 0x406c98
lea eax, [ebp - 0xa44]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
push eax
lea edx, [ebp - 0x61c]
push edx
call esi
push str..._safemon360Cactus.tpi
lea eax, [ebp - 0x61c]
push eax
call esi
lea ecx, [ebp - 0x61c]
push ecx
call edi
test eax, eax
jne 0x406e27
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x412]
push eax
mov word [ebp - 0x414], dx
call fcn.004c5470
mov eax, dword [ebp - 0xa44]
add esp, 0xc
cmp dword [ebp - 0xa30], ebx
jae 0x406cf9
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0x414]
push ecx
call esi
push str...360EntClient.exe
lea edx, [ebp - 0x414]
push edx
call esi
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x20a]
push ecx
mov word [ebp - 0x20c], ax
call fcn.004c5470
mov eax, dword [ebp - 0xa44]
add esp, 0xc
cmp dword [ebp - 0xa30], ebx
jae 0x406d43
lea eax, [ebp - 0xa44]
push eax
lea edx, [ebp - 0x20c]
push edx
call esi
push str...deepscanQhEntInfo.dll
lea eax, [ebp - 0x20c]
push eax
call esi
lea ecx, [ebp - 0x414]
push ecx
call edi
test eax, eax
je 0x406d79
lea edx, [ebp - 0x20c]
push edx
call edi
test eax, eax
jne 0x406e27
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x822]
push ecx
mov word [ebp - 0x824], ax
call fcn.004c5470
mov eax, dword [ebp - 0xa44]
add esp, 0xc
cmp dword [ebp - 0xa30], ebx
jae 0x406dab
lea eax, [ebp - 0xa44]
push eax
lea edx, [ebp - 0x824]
push edx
call esi
push str...360EntClient64.exe
lea eax, [ebp - 0x824]
push eax
call esi
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0xa2a]
push edx
mov word [ebp - 0xa2c], cx
call fcn.004c5470
mov eax, dword [ebp - 0xa44]
add esp, 0xc
cmp dword [ebp - 0xa30], ebx
jae 0x406df5
lea eax, [ebp - 0xa44]
push eax
lea eax, [ebp - 0xa2c]
push eax
call esi
push str...deepscanQhEntInfo64.dll
lea ecx, [ebp - 0xa2c]
push ecx
call esi
lea edx, [ebp - 0x414]
push edx
call edi
test eax, eax
je 0x406e45
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
je 0x406e45
lea esi, [ebp - 0xa48]
call fcn.0040f420
pop esi
pop edi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0xa30], ebx
jb 0x406e5c
mov ecx, dword [ebp - 0xa44]
push ecx
call fcn.004c097a
add esp, 4
mov ecx, dword [ebp - 4]
pop esi
pop edi
xor ecx, ebp
xor al, al
pop ebx
call fcn.004c0985
mov esp, ebp
pop ebp
ret