Function at 0x4b8750
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56612e
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x5a6124]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.http:__api.pdfxd.com_pdf_service_v1_cloud_addition
mov ecx, 0x5abfc8
mov dword [ebp - 0x14], 0x5abfc8
call fcn.00407b50
push str.http:__yijirecovery.com_v1_cloud_checkUpdate
mov ecx, 0x5abfcc
mov dword [ebp - 4], 0
call fcn.00407b50
push str.http:__yijirecovery.com_v1_client_report
mov ecx, 0x5abfd0
mov byte [ebp - 4], 1
call fcn.00407b50
push str.http:__yijirecovery.com_v1_cloud_activity_
mov ecx, 0x5abfd4
mov byte [ebp - 4], 2
call fcn.00407b50
push str.http:__api.pdfxd.com_pdf_service_v1_cloud_miniNews
mov ecx, 0x5abfd8
mov byte [ebp - 4], 3
call fcn.00407b50
push str.http:__l.public.apkevery.com_pc_udpdf_dogSun
mov ecx, 0x5abfdc
mov byte [ebp - 4], 4
call fcn.00407b50
push str.http:__api.pdfxd.com_pdf_service_v1_cloud_confirm
mov ecx, 0x5abfe0
mov byte [ebp - 4], 5
call fcn.00407b50
push str.http:__www.apkevery.com_cms_api_pdfInstCtl.php
mov ecx, 0x5abfe4
mov byte [ebp - 4], 6
call fcn.00407b50
push str.http:__www.apkevery.com_cms_api_pdfInst.php
mov ecx, 0x5abfe8
mov byte [ebp - 4], 7
call fcn.00407b50
push str.https:__cdn.pdfxd.com_download_iOSDRInstaller_iOSDRInstaller360.exe
mov ecx, 0x5abfec
mov byte [ebp - 4], 8
call fcn.00407b50
push str.www.yijirecovery.com
mov ecx, 0x5abff0
mov byte [ebp - 4], 9
call fcn.00407b50
push str.http:__api.pdfxd.com_pdf_service_v1_action
mov ecx, 0x5abff4
mov byte [ebp - 4], 0xa
call fcn.00407b50
push str.http:__api.pdfxd.com_pdf_service_v1_cloud_checkActive
mov ecx, 0x5abff8
mov byte [ebp - 4], 0xb
call fcn.00407b50
push str.http:__yijirecovery.com_v1_user_info
mov ecx, 0x5abffc
mov byte [ebp - 4], 0xc
call fcn.00407b50
push str.http:__yijirecovery.com_v1_passport_logout
mov ecx, 0x5ac000
mov byte [ebp - 4], 0xd
call fcn.00407b50
push str.http:__www.yijirecovery.com_html_usercenter_
mov ecx, 0x5ac004
mov byte [ebp - 4], 0xe
call fcn.00407b50
mov byte [ebp - 4], 0xf
push str.http:__www.yijirecovery.com_html_login_
mov ecx, 0x5ac008
call fcn.00407b50
push str.http:__www.yijirecovery.com_html_payment_
mov ecx, 0x5ac00c
mov byte [ebp - 4], 0x10
call fcn.00407b50
push str.https:__www.yijirecovery.com_html_new_payment_360_
mov ecx, 0x5ac010
mov byte [ebp - 4], 0x11
call fcn.00407b50
push str.http:__yijirecovery.com_v1_upload_token
mov ecx, 0x5ac014
mov byte [ebp - 4], 0x12
call fcn.00407b50
push str.http:__yijirecovery.com_v1_cloud_bestow
mov ecx, 0x5ac018
mov byte [ebp - 4], 0x13
call fcn.00407b50
push str.http:__yijirecovery.com_v1_cloud_bestow_callback
mov ecx, 0x5ac01c
mov byte [ebp - 4], 0x14
call fcn.00407b50
push str.http:__yijirecovery.com_v1_client_feedback
mov ecx, 0x5ac020
mov byte [ebp - 4], 0x15
call fcn.00407b50
push str.http:__yijirecovery.com_v1_coupons_offer
mov ecx, 0x5ac024
mov byte [ebp - 4], 0x16
call fcn.00407b50
push str.http:__archive.pdfxd.com_xundu_cef.7z
mov ecx, 0x5ac028
mov byte [ebp - 4], 0x17
call fcn.00407b50
push str.https:__www.echatsoft.com_visitor_pc_chat.html_companyId521189
mov ecx, 0x5ac02c
mov byte [ebp - 4], 0x18
call fcn.00407b50
push str.https:__shimo.im_docs_xpkWWw8hrXWDcxJp_
mov ecx, 0x5ac030
mov byte [ebp - 4], 0x19
call fcn.00407b50
push ecx
mov edx, str.dev.data
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x10]
call fcn.00496c20
add esp, 4
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x10]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b89c6
push 0x2e
push str.http:__dev.api.pdfxd.com_pdf_service_v1_action
mov ecx, 0x5abff4
call fcn.00407990
push 0x39
push str.http:__dev.api.pdfxd.com_pdf_service_v1_cloud_checkActive
mov ecx, 0x5abff8
call fcn.00407990
mov byte [ebp - 4], 0x1a
or eax, 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b8a11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x4b8a0f
mov esi, dword [ecx + 4]
mov ecx, dword [esi]
mov edi, dword [ecx + 4]
cmp ecx, vtable.ATL::CWin32Heap.0
jne 0x4b8a09
push 0
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x4b8a11
mov ecx, esi
call edi
jmp 0x4b8a11
call esi
mov eax, 0x5abfc8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret