Function at 0x411270
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x49de3f
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x4bc7dc]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bc7dc]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov eax, dword [esp + 0xc8]
mov ebp, dword [esp + 0xcc]
xor edi, edi
push edi
lea esi, [esp + 0x24]
mov dword [esp + 0x28], eax
call fcn.0040cb40
add esp, 4
mov esi, eax
mov dword [esp + 0xc0], edi
mov eax, dword [esi]
cmp dword [eax - 4], 1
jle 0x4112e7
mov ecx, dword [eax - 0xc]
push ecx
push esi
call fcn.00403640
mov eax, dword [esi]
mov ebx, 7
xor edx, edx
mov ecx, eax
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], dx
lea esi, [ecx + 2]
jmp 0x411310
mov dx, word [ecx]
add ecx, 2
cmp dx, di
jne 0x411310
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x80]
call fcn.0040ca50
mov byte [esp + 0xc0], 1
xor eax, eax
mov word [esp + 0x28], ax
push edi
or eax, 0xffffffff
mov ecx, esi
lea edx, [esp + 0x2c]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edi
call fcn.0040c720
mov byte [esp + 0xc0], 3
cmp dword [esp + 0x90], 8
jb 0x411371
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.0047fe1e
add esp, 4
xor edx, edx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], edi
mov word [esp + 0x7c], dx
mov byte [esp + 0xc0], 4
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4113ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
push 0x18
mov eax, str.GoogleInputRegistrar.exe
lea esi, [esp + 0x64]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edi
mov word [esp + 0x64], cx
call fcn.0040ca50
lea edx, [esp + 0x98]
push edx
mov ebx, esi
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc4], 5
call fcn.00475170
mov ecx, eax
xor esi, esi
push esi
or eax, 0xffffffff
lea edx, [esp + 0x2c]
mov byte [esp + 0xc4], 6
call fcn.0040c720
mov edi, 8
mov byte [esp + 0xc0], 5
cmp dword [esp + 0xac], edi
jb 0x411427
mov eax, dword [esp + 0x98]
push eax
call fcn.0047fe1e
add esp, 4
xor ecx, ecx
mov ebx, 7
mov byte [esp + 0xc0], 4
mov dword [esp + 0xac], ebx
mov dword [esp + 0xa8], esi
mov word [esp + 0x98], cx
cmp dword [esp + 0x74], edi
jb 0x41145f
mov edx, dword [esp + 0x60]
push edx
call fcn.0047fe1e
add esp, 4
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x3c], edi
jae 0x41146d
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4114a0
mov dword [esp + 0xc0], 0xffffffff
cmp dword [esp + 0x3c], edi
jb 0x411496
mov eax, dword [esp + 0x28]
push eax
call fcn.0047fe1e
add esp, 4
mov eax, 9
jmp 0x41173d
cmp dword [ebp + 0x14], edi
jb 0x4114aa
mov ecx, dword [ebp]
jmp 0x4114ac
mov ecx, ebp
mov eax, dword [esp + 0x24]
cmp dword [eax + 0x14], edi
jb 0x4114b7
mov eax, dword [eax]
push ecx
push eax
lea ecx, [esp + 0x4c]
push 0x4a6b20
push ecx
call fcn.00474110
add esp, 0x10
mov byte [esp + 0xc0], 7
mov dword [esp + 0x70], esi
xor edx, edx
push 0x18
mov eax, str.GoogleInputRegistrar.exe
lea esi, [esp + 0x64]
mov dword [esp + 0x78], ebx
mov word [esp + 0x64], dx
call fcn.0040ca50
mov eax, esi
push eax
mov byte [esp + 0xc4], 8
call fcn.0041c6f0
add esp, 4
mov byte [esp + 0xc0], 7
mov bl, al
cmp dword [esp + 0x74], edi
jb 0x411522
mov ecx, dword [esp + 0x60]
push ecx
call fcn.0047fe1e
add esp, 4
mov ecx, dword [esp + 0x44]
test bl, bl
je 0x411621
cmp dword [esp + 0x58], edi
jae 0x411538
lea ecx, [esp + 0x44]
lea edx, [esp + 0x18]
push edx
call fcn.00402450
mov bl, 9
mov byte [esp + 0xc0], bl
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x3c], edi
jae 0x411559
lea ecx, [esp + 0x28]
lea eax, [esp + 0x1c]
push eax
call fcn.00402450
lea ecx, [esp + 0x18]
lea esi, [esp + 0x1c]
mov byte [esp + 0xc0], 0xa
call fcn.0040eff0
mov byte [esp + 0xc0], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41159f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc0], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4115c7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc0], 4
cmp dword [esp + 0x58], edi
jb 0x4115e2
mov ecx, dword [esp + 0x44]
push ecx
call fcn.0047fe1e
add esp, 4
xor edx, edx
mov dword [esp + 0xc0], 0xffffffff
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], 0
mov word [esp + 0x44], dx
cmp dword [esp + 0x3c], edi
jb 0x411617
mov eax, dword [esp + 0x28]
push eax
call fcn.0047fe1e
add esp, 4
mov eax, 0x11
jmp 0x41173d
cmp dword [esp + 0x58], edi
jae 0x41162b
lea ecx, [esp + 0x44]
lea edx, [esp + 0x1c]
push edx
call fcn.00402450
mov byte [esp + 0xc0], 0xb
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x3c], edi
jae 0x41164b
lea ecx, [esp + 0x28]
lea eax, [esp + 0x18]
push eax
call fcn.00402450
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.0040ef50
or esi, 0xffffffff
add esp, 8
cmp eax, esi
mov eax, dword [esp + 0x18]
sete bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41168e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc0], 7
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4116b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xc0], 4
test bl, bl
je 0x4116f7
cmp dword [esp + 0x58], edi
jb 0x4116d4
mov ecx, dword [esp + 0x44]
push ecx
call fcn.0047fe1e
add esp, 4
xor edx, edx
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], 0
mov word [esp + 0x44], dx
mov dword [esp + 0xc0], esi
jmp 0x411483
cmp dword [esp + 0x58], edi
jb 0x41170a
mov ecx, dword [esp + 0x44]
push ecx
call fcn.0047fe1e
add esp, 4
xor edx, edx
mov dword [esp + 0xc0], esi
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], 0
mov word [esp + 0x44], dx
cmp dword [esp + 0x3c], edi
jb 0x41173b
mov eax, dword [esp + 0x28]
push eax
call fcn.0047fe1e
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.0047fe29
add esp, 0xb0
ret