Function at 0x41f98d
Capabilities:
Check if file exists

Disassembly:
push 0x140
mov eax, 0x4a3e82
call fcn.00481da3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x138], eax
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x120]
call fcn.0040161b
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x124]
call fcn.0040161b
mov byte [ebp - 4], 1
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x144]
call fcn.0040161b
push 0x103
lea eax, [ebp - 0x117]
push ebx
mov byte [ebp - 4], 2
push eax
mov byte [ebp - 0x118], bl
call fcn.0047e7d0
add esp, 0xc
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x140]
call fcn.0040161b
mov byte [ebp - 4], 3
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x148]
call fcn.0040161b
mov byte [ebp - 4], 4
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x14c]
call fcn.0040161b
mov byte [ebp - 4], 5
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x130]
call fcn.0040161b
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 6
call fcn.0042b045
pop ecx
lea esi, [ebp - 0x118]
call fcn.0041d149
mov edi, dword [0x4efeb4]
cmp edi, ebx
mov dword [0x4efd2c], eax
je 0x41ff1e
cmp dword [edi + 0x768], ebx
mov dword [ebp - 0x128], edi
je 0x41ff1e
lea eax, [ebp - 0x130]
push 2
push eax
call fcn.00412a5a
pop ecx
pop ecx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x120]
call fcn.004015ba
lea esi, [edi + 0x320]
push esi
lea ecx, [ebp - 0x120]
call fcn.00401250
lea eax, [edi + 0x78c]
push eax
lea ecx, [ebp - 0x120]
call fcn.00401250
push 0x2f
push 0x5c
lea ebx, [ebp - 0x120]
call fcn.00402ce3
push 0x4ed5e8
lea ecx, [ebp - 0x12c]
call fcn.00401640
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 7
call fcn.004015ba
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x12c]
add ecx, 0xfffffff0
call fcn.00401325
push esi
lea ecx, [ebp - 0x124]
call fcn.00401250
push 0x5c
push 0x2f
lea ebx, [ebp - 0x124]
call fcn.00402ce3
push dword [edi + 0x760]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41fb78
push dword [edi + 0x760]
lea eax, [edi + 0x738]
push eax
call fcn.0047eb2f
pop ecx
push edx
push eax
call fcn.004020a7
add esp, 0xc
test eax, eax
je 0x41fb78
mov eax, dword [0x4efeb4]
mov dword [eax + 0x310], 3
jmp 0x41ff1e
call fcn.00428e38
lea ecx, [ebp - 0x124]
call fcn.0042e810
call fcn.00428e69
lea eax, [edi + 0x78c]
push eax
lea ecx, [ebp - 0x124]
call fcn.00401250
lea esi, [edi + 0x994]
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x41fd38
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x12c]
call fcn.0040161b
mov byte [ebp - 4], 8
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x11c]
call fcn.0040161b
lea eax, [edi + 0x528]
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 9
call fcn.004014c5
lea eax, [edi + 0xcc]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00401250
push 0x4b6964
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.00402dca
add esp, 0xc
push esi
push eax
lea eax, [ebp - 0x13c]
push eax
mov byte [ebp - 4], 0xa
call fcn.0040a465
add esp, 0xc
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xb
call fcn.004015ba
mov ecx, dword [ebp - 0x13c]
add ecx, 0xfffffff0
call fcn.00401325
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x134]
add ecx, 0xfffffff0
call fcn.00401325
call dword [0x4d1acc]
mov esi, dword [0x4efeb4]
add esi, 0x78c
mov dword [ebp - 0x134], eax
je 0x41fc89
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41fc8d
xor esi, esi
jmp 0x41fca9
lea ebx, [eax + eax]
mov eax, ebx
call fcn.004840d0
mov eax, esp
push dword [ebp - 0x134]
push ebx
push esi
push eax
call fcn.004034ff
mov esi, eax
cmp dword [0x4efc58], 0
mov ebx, dword [ebp - 0x12c]
je 0x41fd1c
push dword [edi + 0x760]
push dword [ebp - 0x11c]
push ebx
push dword [ebp - 0x138]
call fcn.00421460
test eax, eax
je 0x41fd1c
mov eax, dword [0x4efeb4]
mov eax, dword [eax + 0x760]
mov edi, esi
mov esi, eax
call fcn.004213ff
test eax, eax
je 0x41fd16
mov eax, dword [0x4efeb4]
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
mov dword [eax + 0x310], 3
call fcn.00401325
lea ecx, [ebx - 0x10]
call fcn.00401325
jmp 0x41ff1e
mov edi, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
call fcn.00401325
add ebx, 0xfffffff0
mov ecx, ebx
mov byte [ebp - 4], 6
call fcn.00401325
call fcn.00428e38
lea ecx, [ebp - 0x124]
call fcn.00402a47
call fcn.00428e69
push 0
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x138]
lea ecx, [ebp - 0x120]
call fcn.0041d1b6
mov esi, eax
test esi, esi
lea eax, [ebp - 0x118]
push eax
je 0x41fe25
lea ecx, [ebp - 0x128]
call fcn.004134db
push esi
mov byte [ebp - 4], 0xc
push dword [ebp - 0x120]
mov ebx, 0x4ef184
push dword [eax]
push 0x14d
push ebx
call fcn.0042a517
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x128]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.00401325
cmp esi, 0x17
jne 0x41ff1e
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x11c]
call fcn.0040161b
mov esi, 0xc5
push esi
push ebx
mov byte [ebp - 4], 0xd
call fcn.0042a4c4
xor eax, eax
inc eax
push esi
mov dword [0x4ef878], eax
mov dword [0x4efd30], eax
mov eax, dword [0x4ee7f4]
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x138]
push 0x10
push str.Kingsoft_Antivirus_Update
push dword [ebp - 0x11c]
call fcn.0046423e
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
jmp 0x41fd0c
call fcn.0042b045
pop ecx
lea esi, [ebp - 0x118]
call fcn.0041d149
mov dword [0x4efd2c], eax
mov eax, esi
push eax
lea ecx, [ebp - 0x128]
call fcn.004134db
mov byte [ebp - 4], 0xe
push dword [ebp - 0x120]
mov ebx, 0x4ef184
push dword [eax]
push 0x196
push ebx
call fcn.0042a517
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x128]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401325
mov eax, dword [0x4efeb4]
mov dword [eax + 0x310], 3
call fcn.00428e38
mov eax, edi
call fcn.004208f8
test eax, eax
je 0x41ff02
call dword [0x4d1acc]
mov edi, dword [0x4efeb4]
add edi, 0x78c
mov dword [ebp - 0x128], eax
je 0x41fec2
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41fec6
xor eax, eax
jmp 0x41fee0
lea esi, [eax + eax]
mov eax, esi
call fcn.004840d0
mov eax, esp
push dword [ebp - 0x128]
push esi
push edi
push eax
call fcn.004034ff
mov ecx, dword [0x4efeb4]
mov esi, dword [ecx + 0x760]
mov edi, eax
call fcn.004213ff
test eax, eax
jne 0x41ff0e
push 0x197
push ebx
call fcn.0042a4c4
mov dword [0x4ef878], 1
jmp 0x41ff19
push 0x198
push ebx
call fcn.0042a4c4
call fcn.00428e69
mov ecx, dword [ebp - 0x130]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x14c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x148]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x140]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x144]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x124]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x120]
add ecx, 0xfffffff0
call fcn.00401325
xor eax, eax
lea esp, [ebp - 0x15c]
call fcn.00481e26
ret 4