Function at 0x441d70
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x68a1e7
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x732694]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x190], ecx
call fcn.004366c0
mov edi, eax
test edi, edi
je 0x44233c
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69ad90
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x18]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.http:__jtt_win.55kantu.com_mlb6ortjw
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x1c]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.http:__win_ott.55kantu.com_microtime__
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x20]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x695ef0
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 8]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.dg5xsf0sf5uvqt1k
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x24]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.ahruhnawf51rhf6f
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x28]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69aec8
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x2c]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69aeec
call fcn.004027c0
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x30]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
push esp
call fcn.004188f0
mov ecx, eax
call fcn.004e8738
push esi
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 4]
sub esp, 0x18
push esp
call fcn.004f3004
mov eax, dword [edi]
add esp, 4
mov ecx, edi
call dword [eax + 0x10]
sub esp, 0x18
mov esi, esp
call fcn.004e5f6b
push eax
push esi
call fcn.004e735d
mov eax, dword [edi]
add esp, 8
mov ecx, edi
call dword [eax + 0x34]
sub esp, 0x18
mov esi, esp
call fcn.004188f0
mov ecx, eax
call fcn.004e8660
push eax
push esi
call fcn.004e735d
mov eax, dword [edi]
add esp, 8
mov ecx, edi
call dword [eax + 0x44]
lea eax, [ebp - 0x12c]
push eax
call fcn.00441c20
mov ecx, eax
call fcn.004e8d11
push 5
push str.cacje
lea ecx, [ebp - 0x12c]
mov dword [ebp - 4], 0
call fcn.00402da0
push 1
push 0x693250
lea ecx, [ebp - 0x12c]
call fcn.00402da0
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x442021
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x118], 8
lea ecx, [ebp - 0x1c4]
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.004e631a
mov ecx, dword [ebp - 0x1a0]
add esp, 8
mov byte [ebp - 4], 0
test ecx, ecx
je 0x442021
mov edx, dword [ecx]
lea eax, [ebp - 0x1c4]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
sub esp, 0x18
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x18c], esp
push 0x3a8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x194], edx
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x11c]
cmovae ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x19c], ecx
cmp eax, 8
jae 0x442085
movups xmm0, xmmword [ecx]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 7
jmp 0x4420e1
mov esi, eax
mov eax, SysReAllocString
or esi, 7
cmp esi, eax
cmova esi, eax
xor ecx, ecx
mov eax, esi
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
mov ecx, edx
call fcn.004022d0
mov ecx, dword [ebp - 0x194]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x198]
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x19c]
push eax
call fcn.00516ad0
mov eax, dword [ebp - 0x194]
add esp, 0xc
mov ecx, dword [ebp - 0x198]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], esi
push dword [ebp - 0x18c]
call fcn.004e77ee
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x40]
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [ebp - 0x190]
push esi
call dword [eax + 0x48]
mov edx, dword [edi]
lea eax, [esi + 4]
neg esi
mov ecx, edi
sbb esi, esi
and esi, eax
push esi
call dword [edx + 0x4c]
sub esp, 0x18
push esp
call fcn.004188f0
mov ecx, eax
call fcn.004e85af
call fcn.004e7410
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x188]
mov dword [ebp - 0x148], edx
push eax
call fcn.00528663
push dword [ebp - 0x17c]
mov eax, dword [ebp - 0x178]
inc eax
push eax
mov eax, dword [ebp - 0x174]
add eax, 0x76c
push eax
lea eax, [ebp - 0x164]
push str._d_.2d_.2d
push eax
call fcn.004e7099
add esp, 0x1c
mov byte [ebp - 4], 2
lea eax, [ebp - 0x164]
mov ecx, esp
push eax
call fcn.0040b550
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.005175d0
add esp, 0xc
lea eax, [ebp - 0x114]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 3
mov dword [ebp - 0x1a4], 0
lea edx, [eax + 1]
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x442200
sub eax, edx
lea ecx, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.0040cdf0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004eac4d
mov edx, dword [ebp - 0x1a0]
add esp, 8
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x442274
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44226a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442357
push edx
push ecx
call fcn.00447d89
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x144]
mov ecx, esp
push eax
call fcn.0040b550
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov edx, dword [ebp - 0x130]
cmp edx, 0x10
jb 0x4422c5
mov ecx, dword [ebp - 0x144]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4422bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44235c
push edx
push ecx
call fcn.00447d89
add esp, 8
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp edx, 0x10
jb 0x442316
mov ecx, dword [ebp - 0x164]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44230c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442361
push edx
push ecx
call fcn.00447d89
add esp, 8
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
call fcn.00401e90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00447de7
mov esp, ebp
pop ebp
ret
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
int3