Function at 0x4f31b0
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fb2e3
mov eax, dword fs:[0]
push eax
sub esp, 0x330
mov eax, dword [0x544af0]
xor eax, ebp
mov dword [ebp - 0xdc], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x324], ecx
xor eax, eax
mov word [ebp - 0x2e4], ax
push 0x206
push 0
lea ecx, [ebp - 0x2e2]
push ecx
call fcn.004b5f20
add esp, 0xc
push 0
push 0x23
lea edx, [ebp - 0x2e4]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x4f3221
xor eax, eax
jmp 0x4f3678
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004b664b
add esp, 4
lea ecx, [ebp - 0xd8]
call fcn.004032e0
mov dword [ebp - 4], 0
mov dword [ebp - 0x2ec], 0
jmp 0x4f326a
mov ecx, dword [ebp - 0x2ec]
add ecx, 1
mov dword [ebp - 0x2ec], ecx
lea ecx, [ebp - 0x2f4]
call fcn.004032e0
mov byte [ebp - 4], 1
call fcn.004b665d
cdq
mov ecx, 0xa
idiv ecx
add edx, 5
mov dword [ebp - 0x2f0], edx
mov dword [ebp - 0x2f8], 0
jmp 0x4f32aa
mov edx, dword [ebp - 0x2f8]
add edx, 1
mov dword [ebp - 0x2f8], edx
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x2f0]
jae 0x4f32e0
call fcn.004b665d
and eax, 0x8000000f
jns 0x4f32c9
dec eax
or eax, 0xfffffff0
inc eax
push eax
push 0x517c90
lea ecx, [ebp - 0x2f4]
push ecx
call fcn.00404130
add esp, 0xc
jmp 0x4f329b
mov edx, dword [ebp - 0x2f4]
push edx
lea eax, [ebp - 0x2e4]
push eax
push str._s_s.dll
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00404050
add esp, 0x10
lea ecx, [ebp - 0xd8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4f3329
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2f4]
call fcn.004079a0
jmp 0x4f337c
cmp dword [ebp - 0x2ec], 5
jbe 0x4f3368
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2f4]
call fcn.004079a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x2fc]
jmp 0x4f3678
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2f4]
call fcn.004079a0
jmp 0x4f325b
push 0x927c0
push ecx
mov ecx, esp
mov dword [ebp - 0x300], esp
lea edx, [ebp - 0xd8]
push edx
call fcn.00402580
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x32c], eax
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x304], esp
push str.http:__cd001.www.duba.net_duba_install_2011_ever_kinst_12_3.dll
call fcn.00403ca0
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 0
call fcn.004de330
add esp, 0xc
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x4f3407
mov dword [ebp - 0x308], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x308]
jmp 0x4f3678
lea ecx, [ebp - 0xd4]
call fcn.004f42b0
mov byte [ebp - 4], 3
push str.duba
lea ecx, [ebp - 0x1c]
call fcn.00403ca0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004032e0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1c]
push ecx
push str.installdownloadOk_s1
lea edx, [ebp - 0x2e8]
push edx
call fcn.00404050
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x30c], esp
lea eax, [ebp - 0x2e8]
push eax
call fcn.00402580
mov dword [ebp - 0x338], eax
lea ecx, [ebp - 0xd4]
call fcn.004f41b0
lea ecx, [ebp - 0x18]
call fcn.00403d20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00403d70
test eax, eax
jne 0x4f34f6
mov dword [ebp - 0x310], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00403d50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004079a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004079a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.004f4190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x310]
jmp 0x4f3678
push 3
push 0xc
lea edx, [ebp - 0x18]
push edx
call fcn.00403e90
test eax, eax
jne 0x4f3564
mov dword [ebp - 0x314], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00403d50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004079a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004079a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.004f4190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x314]
jmp 0x4f3678
push 0xffffffffffffffff
lea eax, [ebp - 0x18]
push eax
call fcn.00403f10
test eax, eax
jne 0x4f35d9
lea ecx, [ebp - 0x18]
push ecx
call fcn.00403ed0
mov dword [ebp - 0x318], 0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00403d50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004079a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004079a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.004f4190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x318]
jmp 0x4f3678
lea edx, [ebp - 0x18]
push edx
call fcn.00403ed0
mov eax, dword [ebp - 0x1c]
push eax
push str.installinstallOk_s1
lea ecx, [ebp - 0x2e8]
push ecx
call fcn.00404050
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x31c], esp
lea edx, [ebp - 0x2e8]
push edx
call fcn.00402580
mov dword [ebp - 0x33c], eax
lea ecx, [ebp - 0xd4]
call fcn.004f41b0
mov dword [ebp - 0x320], 1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x18]
call fcn.00403d50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004079a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004079a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.004f4190
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.004079a0
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0xdc]
xor ecx, ebp
call fcn.004b5e12
mov esp, ebp
pop ebp
ret