Function at 0x474cc0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fc8f6
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push esi
push edi
mov eax, dword [0x53f030]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
call fcn.0043ae40
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x474d0e
push 0x80004005
call fcn.0043a9b0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
push dword [ebp + 8]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push dword [0x53ed60]
push 0x509980
push eax
call fcn.0043ad30
add esp, 0x10
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov ebx, dword [ebp - 0x28]
lea ecx, [ebp - 0x68]
push 0x20019
push ebx
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 2
call fcn.0043b290
or edi, 0xffffffff
test eax, eax
jne 0x4750b2
call fcn.0043ae40
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x474d8f
push 0x80004005
call fcn.0043a9b0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, 0x104
or ecx, edx
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], 0x104
jge 0x474dcc
push 0x104
lea ecx, [ebp - 0x10]
call fcn.0043b5a0
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x18]
push ecx
push eax
push 0x50d700
lea ecx, [ebp - 0x68]
call fcn.0043d750
test eax, eax
mov eax, dword [ebp - 0x10]
sete byte [ebp - 0x11]
push dword [eax - 8]
push eax
call fcn.004d9e5f
mov edx, eax
add esp, 8
test edx, edx
js 0x475359
mov ecx, dword [ebp - 0x10]
cmp edx, dword [ecx - 8]
jg 0x475359
mov dword [ecx - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2], cx
cmp byte [ebp - 0x11], cl
je 0x475092
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x474e33
xor esi, esi
jmp 0x47531f
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 4
push eax
mov ecx, 0x5442c8
call fcn.004cc620
test eax, eax
je 0x475086
mov eax, dword [ebp - 0x30]
xor esi, esi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], esi
test eax, eax
jle 0x475086
call fcn.00472d40
mov ecx, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 5
test esi, esi
js 0x475348
cmp esi, dword [ebp - 0x30]
jge 0x475348
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x4c]
push 0
push edx
push dword [eax + esi*4]
call fcn.004729a0
xor edi, edi
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x48], edi
jbe 0x475066
nop
call fcn.0043ae40
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x474d04
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 6
cmp edi, dword [ebp - 0x48]
jae 0x475359
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [eax + edi*4]
mov ecx, dword [ecx + 4]
cmp eax, ecx
jae 0x475038
mov esi, dword [ebp - 0x38]
lea ecx, [eax + eax*4]
mov eax, dword [esi]
lea eax, [eax + ecx*8]
push eax
lea ecx, [ebp - 0x18]
call fcn.0043a620
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 7
call fcn.0043ae40
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x474d04
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x9c], edi
push str.manifest_browser_actiondefault_popup
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 8
call fcn.0043a420
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 9
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 4]
cmp eax, ecx
jb 0x474f93
xor esi, esi
jmp 0x474fb1
lea ecx, [eax + eax*4]
mov eax, dword [esi]
lea ecx, [eax + ecx*8]
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00473840
xor eax, eax
cmp eax, dword [ebp - 0x58]
sbb esi, esi
neg esi
mov edx, dword [ebp - 0x3c]
or ecx, 0xffffffff
add edx, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x474fd2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
mov esi, dword [ebp - 0x18]
je 0x474ffc
xor eax, eax
test esi, esi
setne al
test eax, eax
je 0x474d04
push esi
push dword [ebp + 8]
call fcn.004da111
add esp, 8
test eax, eax
je 0x47528b
add edi, 0xfffffff0
mov byte [ebp - 4], 7
or ecx, 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47501a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x475035
push dword [ebp - 0x58]
push eax
call fcn.00490380
push dword [ebp - 0x5c]
call fcn.004d92bb
add esp, 0xc
mov edi, dword [ebp - 0x20]
add esi, 0xfffffff0
mov byte [ebp - 4], 5
or ecx, 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x475056
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, dword [ebp - 0x48]
jb 0x474ed0
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x475076
push eax
call fcn.004d92bb
add esp, 4
inc esi
mov dword [ebp - 0x24], esi
cmp esi, dword [ebp - 0x1c]
jl 0x474e75
or edi, 0xffffffff
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.004914e0
mov edx, dword [ebp - 0x10]
mov ecx, edi
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4750b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0x11
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xa
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x8c], 0x3f400000
mov dword [ebp - 0x88], 0x3e800000
mov dword [ebp - 0x84], 0x40100000
mov dword [ebp - 0x80], 0x26
mov dword [ebp - 0x7c], 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xa
push eax
push dword [0x53ed64]
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0043d080
add esp, 0xc
cmp dword [ebp - 0x94], 0
je 0x475211
mov eax, dword [ebp - 0x90]
xor edi, edi
test eax, eax
je 0x475164
mov ecx, dword [ebp - 0x98]
cmp dword [ecx + edi*4], 0
jne 0x475363
inc edi
cmp edi, eax
jb 0x475155
xor edi, edi
test edi, edi
je 0x47520e
mov ecx, dword [ebp + 8]
test edi, edi
je 0x47520e
cmp dword [edi + 4], 1
jne 0x4751d5
lea esi, [edi + 8]
mov dword [ebp - 0x1c], esi
test ecx, ecx
je 0x4751d5
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jl 0x4751d5
push ecx
push eax
call fcn.004d9e7e
add esp, 8
test eax, eax
je 0x4751d2
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4751d2
cmp dword [ecx - 0xc], 0
jl 0x4751d2
push str._AskPartnerNetwork_Toolbar_
push ecx
call fcn.004d9e7e
mov esi, eax
add esp, 8
test esi, esi
je 0x4751d2
sub esi, dword [edi + 8]
sar esi, 1
cmp esi, 0xffffffff
jne 0x47536b
mov ecx, dword [ebp + 8]
mov esi, dword [edi + 0xc]
test esi, esi
jne 0x475204
mov eax, dword [edi + 0x10]
xor edx, edx
mov edi, dword [ebp - 0x90]
div edi
mov ebx, dword [ebp - 0x98]
inc edx
cmp edx, edi
jae 0x475201
mov eax, dword [ebx + edx*4]
test eax, eax
cmovne esi, eax
inc edx
test esi, esi
je 0x4751f0
mov ebx, dword [ebp - 0x28]
mov edi, esi
test esi, esi
jne 0x475171
or edi, 0xffffffff
mov dword [ebp + 0xc], 0
lea ecx, [ebp - 0x98]
call fcn.0043c020
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x475234
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, edi
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x475251
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp + 8]
or ecx, 0xffffffff
add edi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x475275
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x30]
jge 0x475348
mov eax, dword [ebp - 0x34]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp + 0xc]
push eax
call fcn.0043a620
lea edx, [edi - 0x10]
mov byte [ebp - 4], 7
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4752c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4752e1
push dword [ebp - 0x58]
push eax
call fcn.00490380
push dword [ebp - 0x5c]
call fcn.004d92bb
add esp, 0xc
add esi, 0xfffffff0
mov byte [ebp - 4], 5
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4752fe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x47530e
push eax
call fcn.004d92bb
add esp, 4
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 3
call fcn.004914e0
mov esi, 1
mov edx, dword [ebp - 0x10]
mov ecx, edi
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x475226
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x475226
push 0
push 0
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]
push 0x80070057
call fcn.0043a9b0
mov edi, dword [ecx + edi*4]
jmp 0x475166
push str._AskPartnerNetwork_Toolbar_
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, esi
mov dword [ebp - 0x18], eax
mov ecx, eax
js 0x475359
mov edx, dword [ebp - 0x1c]
mov edi, dword [edx]
mov esi, dword [edi - 0xc]
cmp ecx, esi
jg 0x475359
cmp word [edi + ecx*2], 0x2f
je 0x47539b
cmp ecx, esi
jge 0x47539b
inc ecx
jns 0x475387
jmp 0x475359
mov eax, dword [ebp - 0x18]
sub ecx, eax
push ecx
push eax
lea eax, [ebp - 0x1c]
mov ecx, edx
push eax
call fcn.0043b1e0
mov ecx, dword [ebp + 0xc]
push eax
mov byte [ebp - 4], 0xb
call fcn.0043a620
mov edx, dword [ebp - 0x1c]
or edi, 0xffffffff
add edx, 0xfffffff0
mov byte [ebp - 4], 0xa
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4753dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp + 0xc], 1
jmp 0x475218