Function at 0x4affb9
Capabilities:
Check if file exists
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x664b68
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x4b07c
call fcn.00609980
mov eax, dword [0x7286bc]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4b08c], ecx
mov dword [0x735ea0], 0x3dcccccd
push 0x6b81ec
mov ecx, 0x735ea4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_calendar_getsuitabletaboo_yearyear
mov ecx, 0x735ea8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_calendar_getfestival
mov ecx, 0x735eac
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_calendar_getfestivalinfo
mov ecx, 0x735eb0
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_calendar_getholiday_yearyear
mov ecx, 0x735eb4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_common_getip
mov ecx, 0x735eb8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_common_getipinfo
mov ecx, 0x735ebc
call fcn.004195af
push str.https:__my.ruanmei.com_api_user_getaccesstoken_aesuserhashaesuserhashwithuserinfowithuserinfo
mov ecx, 0x735ec0
call fcn.004195af
push str.https:__my.ruanmei.com_my.ruanmei.com_api_user_getuserinfobyaccesstoken_accessTokenaccesstoken
mov ecx, 0x735ec4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_add
mov ecx, 0x735ec8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_update
mov ecx, 0x735ecc
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_get_lastupdatetimelastupdatetime
mov ecx, 0x735ed0
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_delete_reminderidreminderid
mov ecx, 0x735ed4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_subscribedetail_getsubscribedetail
mov ecx, 0x735ed8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_update
mov ecx, 0x735edc
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_delete
mov ecx, 0x735ee0
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_add
mov ecx, 0x735ee4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_updateuserconfig
mov ecx, 0x735ee8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_get
mov ecx, 0x735eec
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_subscribedetail_gettrafficlimitcitylist
mov ecx, 0x735ef0
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_common_getcitytimezone
mov ecx, 0x735ef4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_search_subscribe_subscribe_key_pagepagepagesizepagesize
mov ecx, 0x735ef8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_search_tool_subscribe_key_pagepagepagesizepagesize
mov ecx, 0x735efc
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_search_hotkeyword
mov ecx, 0x735f00
call fcn.004195af
push str.https:__my.ruanmei.com_api_User_MA
mov ecx, 0x735f04
call fcn.004195af
push str.https:__my.ruanmei.com_api_User_ModifyNick_userhashuserhashusernickusernickdes
mov ecx, 0x735f08
call fcn.004195af
push str.https:__my.ruanmei.com_api_User_ModifyPassword_userhashuserhashpassnewpassoldpassoldpassdes
mov ecx, 0x735f0c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_subscribedetail_getsubscribemarketmenu
mov ecx, 0x735f10
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getweatherarea
mov ecx, 0x735f14
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getweatherinfo_weatherareacodeweatherareacode
mov ecx, 0x735f18
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getweatherforecast_weatherareacodeweatherareacode
mov ecx, 0x735f1c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getweatherlifeexponent_weatherareacodeweatherareacode
mov ecx, 0x735f20
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getdisasterwarning_weatherareacodeweatherareacode
mov ecx, 0x735f24
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_weather_getweatherrealtime_weatherareacodeweatherareacode
mov ecx, 0x735f28
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_subscribedetail_getsubscribedetail_idsubscribeid
mov ecx, 0x735f2c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_get_pagepagepagesizepagesize
mov ecx, 0x735f30
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_getmessage
mov ecx, 0x735f34
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_readall
mov ecx, 0x735f38
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_read
mov ecx, 0x735f3c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_clear
mov ecx, 0x735f40
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_getpushlist_timetime
mov ecx, 0x735f44
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_getunreadcount
mov ecx, 0x735f48
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_upgrade_squirrel_fromcurrentversionignorefalse
mov ecx, 0x735f4c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_tools_gettoolsdetail_accessTokenaccesstoken
mov ecx, 0x735f50
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_subscribedetail_getsubscribedetaillist_pagepagepageSizepagesizeorderorder
mov ecx, 0x735f54
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_addlist
mov ecx, 0x735f58
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_usersubscribe_addlist
mov ecx, 0x735f5c
call fcn.004195af
push str.https:__my.ruanmei.com_api_sms.asmx_SendSms_hashhash
mov ecx, 0x735f60
call fcn.004195af
push str.https:__my.ruanmei.com_receive_avatar.aspx_uusernameppassword
mov ecx, 0x735f64
call fcn.004195af
push str.https:__my.ruanmei.com_api_email.asmx_SendCheckCodeEmail_hashhash
mov ecx, 0x735f68
call fcn.004195af
push str.http:__my.ruanmei.com_api_user_mm_userhashuserhashnewmobilemobilesendcodesendcode
mov ecx, 0x735f6c
call fcn.004195af
push str.http:__my.ruanmei.com_api_user_me_userhashuserhashnewmailemailsendcodesendcode
mov ecx, 0x735f70
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_message_getpushlist_timelastupdatetime
mov ecx, 0x735f74
call fcn.004195af
push str.http:__union.ruanmei.com_receive_postdata.aspx_uidchannelidrrttt1t1t2t2t3t3
mov ecx, 0x735f78
call fcn.004195af
push str.http:__my.ruanmei.com_app_user_signinyunrili.html_mtwidth397mtheight650mtissingle1hidemenu1
mov ecx, 0x735f7c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_tools_get
mov ecx, 0x735f80
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_tools_update
mov ecx, 0x735f84
call fcn.004195af
push str.https:__mytime.ruanmei.com_feedback_mtwidth670mtheight500platformwindows
mov ecx, 0x735f88
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_getremindergroup
mov ecx, 0x735f8c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_addremindergroup
mov ecx, 0x735f90
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_updateremindergroup
mov ecx, 0x735f94
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_deleteremindergroup
mov ecx, 0x735f98
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_getuserremindergroupinviteurl
mov ecx, 0x735f9c
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_adduserremindergroup
mov ecx, 0x735fa0
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_getuserremindergroup
mov ecx, 0x735fa4
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_updateuserremindergroup
mov ecx, 0x735fa8
call fcn.004195af
push str.https:__mtapi.ruanmei.com_api_reminder_deleteuserremindergroup
mov ecx, 0x735fac
call fcn.004195af
push str.https:__mytime.ruanmei.com_subscribecontent_astrofortune.html_datedateastroastro
mov ecx, 0x735fb0
call fcn.004195af
push str.https:__mytime.ruanmei.com_import_outlook_accesstokenaccesstoken
mov ecx, 0x735fb4
call fcn.004195af
push str.https:__mytime.ruanmei.com_user_loginimg
mov ecx, 0x735fb8
call fcn.004195af
push str.https:__my.ruanmei.com_wechat_applogin.html_frommytime_windows
mov ecx, 0x735fbc
call fcn.004195af
push str.https:__my.ruanmei.com_api_sms_sendsmscode
mov ecx, 0x735fc0
call fcn.004195af
push str.https:__my.ruanmei.com_api_user_reglogin
mov ecx, 0x735fc4
call fcn.004195af
push str.https:__my.ruanmei.com_api_sms_timestamp
mov ecx, 0x735fc8
call fcn.004195af
push str.https:__my.ruanmei.com_api_sms_nativecodes
mov ecx, 0x735fcc
call fcn.004195af
mov dword [0x735fd0], 0xdf
push 0x680a18
mov ecx, 0x735fe0
call fcn.004195af
mov dword [0x735fd4], 0xe10
mov eax, 0x708
mov dword [0x735fd8], eax
mov dword [0x735fdc], eax
push str.202.112.10.36202.112.29.82202.112.0.7202.108.6.95103.18.128.60
mov ecx, 0x735fe4
call fcn.004195af
lea ecx, [ebp - 0x4b020]
call fcn.00418054
push str.20200110
lea ecx, [ebp - 0x4b020]
call fcn.004195af
push str.20200218
lea ecx, [ebp - 0x4b01c]
call fcn.004195af
mov dword [ebp - 0x4b018], 0x1e
lea eax, [ebp - 0x4b020]
push eax
mov ecx, 0x735fe8
call fcn.0044b326
lea ecx, [ebp - 0x4b088]
call fcn.00418076
mov dword [ebp - 0x4b084], 0x64
xor ebx, ebx
mov dword [ebp - 0x4b088], ebx
push 0x6809b0
lea ecx, [ebp - 0x4b080]
call fcn.004195af
mov eax, dword [ebp - 0x4b088]
mov dword [0x735ff4], eax
mov eax, dword [ebp - 0x4b084]
mov dword [0x735ff8], eax
lea eax, [ebp - 0x4b080]
push eax
mov ecx, 0x735ffc
call fcn.00418bac
mov ecx, dword [ebp - 0x4b080]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x4b020]
call fcn.004187b0
push 0x4b000
push ebx
lea eax, [ebp - 0x4b014]
push eax
call fcn.0060b7a0
push 0x6ba7f8
push 0x735a84
lea eax, [ebp - 0x4b07c]
push eax
call fcn.004227e4
add esp, 0x18
mov edi, dword [ebp - 0x4b07c]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b0671
or dword [ebp - 0x4b078], 0xffffffff
push 0x80
push 3
push 1
push SysReAllocString
push edi
lea ecx, [ebp - 0x4b078]
call fcn.004dba98
push ebx
mov esi, dword [ebp - 0x4b078]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
push ebx
lea eax, [ebp - 0x4b014]
push eax
lea ecx, [ebp - 0x4b078]
call fcn.004e6b95
test ebx, ebx
jle 0x4b0665
and dword [ebp - 4], 0
wait
push 0xffffffffffffffff
push 1
lea ecx, [ebp - 0x4b04c]
call fcn.0051177a
push ebx
lea eax, [ebp - 0x4b014]
push eax
lea eax, [ebp - 0x4b02c]
push eax
lea ecx, [ebp - 0x4b04c]
call fcn.0045216e
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x4b02c]
push eax
call fcn.0041c7de
mov ecx, dword [ebp - 0x4b08c]
call fcn.004ad069
push 0
push 1
lea ecx, [ebp - 0x4b02c]
call fcn.0041f932
wait
or dword [ebp - 4], 0xffffffff
jmp 0x4b0665
cmp esi, 0xffffffff
je 0x4b0671
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [edi - 0x10]
call fcn.00419521
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00609802
mov esp, ebp
pop ebp
ret