Function at 0x479600
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
push esi
push edi
lea edi, [ebp - 0x448]
mov ecx, 0x112
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x4f3280]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov word [ebp - 0x21c], 0
push 0x208
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.004a1e50
add esp, 0xc
mov word [ebp - 0x430], 0
push 0x208
push 0
lea ecx, [ebp - 0x42e]
push ecx
call fcn.004a1e50
add esp, 0xc
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x448], 0
lea edx, [ebp - 0x21c]
push edx
call fcn.0047ad00
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4796a2
jmp 0x479861
lea eax, [ebp - 0x430]
push eax
call fcn.0047ad00
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4796c4
jmp 0x479861
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004a1dab
add esp, 4
mov edx, 0x104
sub edx, eax
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
push eax
push 0x4d3f10
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004a6b2f
add esp, 0xc
lea edx, [ebp - 0x430]
push edx
call fcn.004a1dab
add esp, 4
mov ecx, 0x104
sub ecx, eax
mov dword [ebp - 0x448], ecx
mov edx, dword [ebp - 0x448]
push edx
push str.WinSock2.Bak
lea eax, [ebp - 0x430]
push eax
call fcn.004a6b2f
add esp, 0xc
mov esi, esp
lea ecx, [ebp - 0x430]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.004c3b36
test eax, eax
jne 0x47978b
mov esi, esp
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.004c3b36
test eax, eax
jne 0x479770
jmp 0x479861
push 0x104
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x430]
push ecx
call fcn.004a6b6c
add esp, 0xc
push 1
push 0x4d3f48
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp esi, esp
call fcn.004c3b36
push eax
call fcn.0047b100
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4797bd
jmp 0x479861
push 1
push 0x4d3f6c
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp esi, esp
call fcn.004c3b36
push eax
call fcn.0047b100
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4797e9
jmp 0x479861
mov esi, esp
push 0
lea edx, [ebp - 0x43c]
push edx
push 0
push 0
push 4
push 0
push 0
push str.SYSTEMCurrentControlSetServicesWinSock2
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp esi, esp
call fcn.004c3b36
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x479828
jmp 0x479861
mov esi, esp
push 8
lea eax, [ebp - 0x430]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegRestoreKeyW]
cmp esi, esp
call fcn.004c3b36
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x47985a
jmp 0x479861
mov dword [ebp - 8], 1
cmp dword [ebp - 0x43c], 0
je 0x47988a
mov esi, esp
mov edx, dword [ebp - 0x43c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.004c3b36
mov dword [ebp - 0x43c], 0
mov eax, dword [ebp - 8]
push edx
mov ecx, ebp
push eax
lea edx, [0x4798bc]
call fcn.004c3b59
pop eax
pop edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a1873
add esp, 0x448
cmp ebp, esp
call fcn.004c3b36
mov esp, ebp
pop ebp
ret