Function at 0x448140
Capabilities:
Check if file exists
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45b627
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push esi
mov eax, dword [0x475080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00405940
mov dword [ebp - 4], 0
push 0x4682f8
lea eax, [ebp - 0x1c]
call fcn.00405aa0
push eax
call fcn.0043408e
add esp, 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x44828d
lea eax, [ebp - 0x1c]
call fcn.00405aa0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x448260
lea eax, [ebp - 0x1c]
call fcn.00405ab0
mov esi, eax
push 0x5c
lea ecx, [ebp - 0x1c]
call fcn.00412950
sub esi, eax
sub esi, 1
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x1c]
push ecx
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x24]
call fcn.0040e750
mov byte [ebp - 4], 1
lea eax, [ebp - 0x24]
call fcn.00405aa0
push eax
call sym.Install_vip.exe_public:_static_class_CNsProcess____cdecl_CNsProcess::Instance_void_
mov ecx, eax
call sym.Install_vip.exe_public:_void___thiscall_CNsProcess::KillProcess_wchar_t_const__
push 0x468300
lea eax, [ebp - 0x1c]
call fcn.00405aa0
push eax
call fcn.0043408e
add esp, 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x448252
push 1
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0x14]
push eax
call fcn.004356d4
add esp, 0xc
mov byte [ebp - 0x29], 0
mov byte [ebp - 4], 0
lea eax, [ebp - 0x24]
call fcn.00405b50
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c]
call fcn.00405b50
mov al, byte [ebp - 0x29]
jmp 0x448367
mov byte [ebp - 4], 0
lea eax, [ebp - 0x24]
call fcn.00405b50
jmp 0x44828d
push 1
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0x14]
push edx
call fcn.004356d4
add esp, 0xc
mov byte [ebp - 0x2a], 0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c]
call fcn.00405b50
mov al, byte [ebp - 0x2a]
jmp 0x448367
mov dword [ebp - 0x18], 0x100000
mov eax, dword [ebp - 0x18]
push eax
call fcn.00432394
add esp, 4
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
cmp dword [ebp + 0xc], 0
jl 0x448333
jg 0x4482bb
cmp dword [ebp + 8], 0
jbe 0x448333
mov edx, dword [ebp + 0x14]
push edx
call fcn.004350bf
add esp, 4
test eax, eax
jne 0x448333
mov eax, dword [ebp - 0x18]
cdq
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp + 0xc]
jl 0x4482ed
jg 0x4482e7
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp + 8]
jbe 0x4482ed
mov edx, dword [ebp + 8]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 1
mov edx, dword [ebp - 0x14]
push edx
call fcn.004350a2
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call sym.Install_vip.exe_int___cdecl__NsWriteFile_struct__iobuf___void___unsigned_long_int_
add esp, 0xc
mov eax, dword [ebp - 0x28]
cdq
mov ecx, dword [ebp + 8]
sub ecx, eax
mov eax, dword [ebp + 0xc]
sbb eax, edx
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
jmp 0x4482a9
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.00433fc5
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
call fcn.0042802a
add esp, 4
mov byte [ebp - 0x35], 1
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c]
call fcn.00405b50
mov al, byte [ebp - 0x35]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x10