Function at 0x441f00
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x68a4d7
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x732694]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x190], ecx
call fcn.004367f0
mov edi, eax
test edi, edi
je 0x4424cc
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69ad90
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x18]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.http:__jtt_win.55kantu.com_mlb6ortjw
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x1c]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.http:__win_ott.55kantu.com_microtime__
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x20]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x695ef0
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 8]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.dg5xsf0sf5uvqt1k
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x24]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push str.ahruhnawf51rhf6f
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x28]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69aec8
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x2c]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
mov ecx, esp
push 0x69aeec
call fcn.004027c0
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x30]
sub esp, 0x18
mov esi, esp
push 0x3a8
sub esp, 0x18
push esp
call fcn.004188f0
mov ecx, eax
call fcn.004e88e8
push esi
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 4]
sub esp, 0x18
push esp
call fcn.004f326f
mov eax, dword [edi]
add esp, 4
mov ecx, edi
call dword [eax + 0x10]
sub esp, 0x18
mov esi, esp
call fcn.004e611b
push eax
push esi
call fcn.004e750d
mov eax, dword [edi]
add esp, 8
mov ecx, edi
call dword [eax + 0x34]
sub esp, 0x18
mov esi, esp
call fcn.004188f0
mov ecx, eax
call fcn.004e8810
push eax
push esi
call fcn.004e750d
mov eax, dword [edi]
add esp, 8
mov ecx, edi
call dword [eax + 0x44]
lea eax, [ebp - 0x12c]
push eax
call fcn.00441db0
mov ecx, eax
call fcn.004e8f7c
push 5
push str.cacje
lea ecx, [ebp - 0x12c]
mov dword [ebp - 4], 0
call fcn.00402da0
push 1
push 0x693250
lea ecx, [ebp - 0x12c]
call fcn.00402da0
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4421b1
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x118], 8
lea ecx, [ebp - 0x1c4]
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.004e64ca
mov ecx, dword [ebp - 0x1a0]
add esp, 8
mov byte [ebp - 4], 0
test ecx, ecx
je 0x4421b1
mov edx, dword [ecx]
lea eax, [ebp - 0x1c4]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
sub esp, 0x18
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x18c], esp
push 0x3a8
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x194], edx
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x11c]
cmovae ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x19c], ecx
cmp eax, 8
jae 0x442215
movups xmm0, xmmword [ecx]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 7
jmp 0x442271
mov esi, eax
mov eax, SysReAllocString
or esi, 7
cmp esi, eax
cmova esi, eax
xor ecx, ecx
mov eax, esi
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
mov ecx, edx
call fcn.004022d0
mov ecx, dword [ebp - 0x194]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x198]
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x19c]
push eax
call fcn.00516d30
mov eax, dword [ebp - 0x194]
add esp, 0xc
mov ecx, dword [ebp - 0x198]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], esi
push dword [ebp - 0x18c]
call fcn.004e799e
mov eax, dword [edi]
add esp, 0x20
mov ecx, edi
call dword [eax + 0x40]
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [ebp - 0x190]
push esi
call dword [eax + 0x48]
mov edx, dword [edi]
lea eax, [esi + 4]
neg esi
mov ecx, edi
sbb esi, esi
and esi, eax
push esi
call dword [edx + 0x4c]
sub esp, 0x18
push esp
call fcn.004188f0
mov ecx, eax
call fcn.004e875f
call fcn.004e75c0
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x188]
mov dword [ebp - 0x148], edx
push eax
call fcn.005288d3
push dword [ebp - 0x17c]
mov eax, dword [ebp - 0x178]
inc eax
push eax
mov eax, dword [ebp - 0x174]
add eax, 0x76c
push eax
lea eax, [ebp - 0x164]
push str._d_.2d_.2d
push eax
call fcn.004e7249
add esp, 0x1c
mov byte [ebp - 4], 2
lea eax, [ebp - 0x164]
mov ecx, esp
push eax
call fcn.0040b550
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.00517830
add esp, 0xc
lea eax, [ebp - 0x114]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 3
mov dword [ebp - 0x1a4], 0
lea edx, [eax + 1]
mov dword [ebp - 0x1a0], 0xf
mov byte [ebp - 0x1b4], 0
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x442390
sub eax, edx
lea ecx, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.0040cdf0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004eaeb8
mov edx, dword [ebp - 0x1a0]
add esp, 8
mov byte [ebp - 4], 3
cmp edx, 0x10
jb 0x442404
mov ecx, dword [ebp - 0x1b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4423fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424e7
push edx
push ecx
call fcn.00447f19
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x144]
mov ecx, esp
push eax
call fcn.0040b550
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov edx, dword [ebp - 0x130]
cmp edx, 0x10
jb 0x442455
mov ecx, dword [ebp - 0x144]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44244b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424ec
push edx
push ecx
call fcn.00447f19
add esp, 8
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp edx, 0x10
jb 0x4424a6
mov ecx, dword [ebp - 0x164]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44249c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424f1
push edx
push ecx
call fcn.00447f19
add esp, 8
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
call fcn.00401e90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00447f77
mov esp, ebp
pop ebp
ret
call fcn.0051b084
call fcn.0051b084
call fcn.0051b084
int3