Function at 0x4794c0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
push esi
push edi
lea edi, [ebp - 0x448]
mov ecx, 0x112
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x4f3280]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov word [ebp - 0x21c], 0
push 0x208
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.004a1d00
add esp, 0xc
mov word [ebp - 0x430], 0
push 0x208
push 0
lea ecx, [ebp - 0x42e]
push ecx
call fcn.004a1d00
add esp, 0xc
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x448], 0
lea edx, [ebp - 0x21c]
push edx
call fcn.0047aca0
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x479562
jmp 0x479721
lea eax, [ebp - 0x430]
push eax
call fcn.0047aca0
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x479584
jmp 0x479721
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004a1c5b
add esp, 4
mov edx, 0x104
sub edx, eax
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
push eax
push 0x4d3f10
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004a69e0
add esp, 0xc
lea edx, [ebp - 0x430]
push edx
call fcn.004a1c5b
add esp, 4
mov ecx, 0x104
sub ecx, eax
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x448]
push edx
push str.WinSock2.Bak
lea eax, [ebp - 0x430]
push eax
call fcn.004a69e0
add esp, 0xc
mov esi, esp
lea ecx, [ebp - 0x430]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.004c39d6
test eax, eax
jne 0x47964b
mov esi, esp
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.004c39d6
test eax, eax
jne 0x479630
jmp 0x479721
push 0x104
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x430]
push ecx
call fcn.004a6a1d
add esp, 0xc
push 1
push 0x4d3f48
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp esi, esp
call fcn.004c39d6
push eax
call fcn.0047b0a0
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x47967d
jmp 0x479721
push 1
push 0x4d3f6c
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp esi, esp
call fcn.004c39d6
push eax
call fcn.0047b0a0
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4796a9
jmp 0x479721
mov esi, esp
push 0
lea edx, [ebp - 0x43c]
push edx
push 0
push 0
push 4
push 0
push 0
push str.SYSTEMCurrentControlSetServicesWinSock2
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp esi, esp
call fcn.004c39d6
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x4796e8
jmp 0x479721
mov esi, esp
push 8
lea eax, [ebp - 0x430]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegRestoreKeyW]
cmp esi, esp
call fcn.004c39d6
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x47971a
jmp 0x479721
mov dword [ebp - 8], 1
cmp dword [ebp - 0x43c], 0
je 0x47974a
mov esi, esp
mov edx, dword [ebp - 0x43c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.004c39d6
mov dword [ebp - 0x43c], 0
mov eax, dword [ebp - 8]
push edx
mov ecx, ebp
push eax
lea edx, [0x47977c]
call fcn.004c39f9
pop eax
pop edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a1723
add esp, 0x448
cmp ebp, esp
call fcn.004c39d6
mov esp, ebp
pop ebp
ret