Function at 0x4933b0
Capabilities:
Delete file
Move file
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x531fcc
mov eax, dword fs:[0]
push eax
mov eax, 0x960a0
call fcn.004f01b0
mov eax, dword [0x58c250]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov eax, dword [0x58c214]
mov edx, dword [eax + 0xc]
mov ecx, 0x58c214
call edx
add eax, 0x10
mov dword [ebp - 0x9609c], eax
mov byte [ebp - 4], 2
push 0x53bb00
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp - 0x96090]
push ecx
call fcn.0042b720
mov bl, 3
mov byte [ebp - 4], bl
push 0x540ed8
push eax
lea edx, [ebp - 0x96094]
push edx
call fcn.0042b720
add esp, 0x18
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x9609c]
call fcn.004022d0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x96094]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493469
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x96090]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49348f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x9609c]
push 0x53d1e4
push esi
call fcn.004f2ab3
mov dword [ebp - 0x960a4], eax
lea eax, [esi - 0x10]
push eax
mov dword [ebp - 0x96094], eax
call fcn.00401500
add eax, 0x10
add esp, 0xc
mov dword [ebp - 0x96098], eax
mov byte [ebp - 4], 8
push 1
push 0x53e6f0
lea ecx, [ebp - 0x96098]
call fcn.00401ed0
mov ecx, dword [ebp - 0x96098]
push 0x53bdf8
push ecx
call fcn.004f2ab3
push 0x32000
lea edx, [ebp - 0x32013]
push 0
push edx
mov dword [ebp - 0x960a0], eax
mov byte [ebp - 0x32014], 0
call fcn.004f0550
add esp, 0x14
push 0x64078
lea eax, [ebp - 0x9608c]
push 0
push eax
call fcn.004f0550
mov ecx, dword [ebp - 0x960a4]
push ecx
push 0x32000
lea edx, [ebp - 0x32014]
push 1
push edx
call fcn.004f42e8
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0x1c
push 0
push 0
mov edi, eax
push edi
lea eax, [ebp - 0x32014]
push eax
push 0
push 0xfde9
mov dword [ebp - 0x96090], edi
call ebx
lea esi, [edi + edi]
push esi
mov dword [ebp - 0x960ac], eax
call fcn.004f200f
push esi
push 0
push eax
mov dword [ebp - 0x960a8], eax
call fcn.004f0550
mov esi, dword [ebp - 0x960ac]
mov ecx, dword [ebp - 0x960a8]
add esp, 0x10
push esi
push ecx
push edi
lea edx, [ebp - 0x32014]
push edx
push 0
push 0xfde9
call ebx
xor edx, edx
test esi, esi
jle 0x493626
lea ecx, [ebp - 0x9608c]
mov edi, edi
mov eax, dword [ebp - 0x960a8]
movzx eax, word [eax + edx*2]
mov ebx, 0xff
cmp ax, bx
ja 0x4935cb
cmp eax, 0x20
jb 0x493621
jmp 0x49361b
mov ebx, 0x100
cmp ax, bx
jb 0x4935df
mov ebx, 0x4ff
cmp ax, bx
jbe 0x49361b
mov ebx, 0x2000
cmp ax, bx
jb 0x4935f3
mov ebx, 0x27ff
cmp ax, bx
jbe 0x49361b
mov ebx, 0x2900
cmp ax, bx
jb 0x493607
mov ebx, 0x2bf
cmp ax, bx
jbe 0x49361b
mov ebx, 0xfb00
cmp ax, bx
jb 0x493621
mov ebx, 0xfeff
cmp ax, bx
ja 0x493621
mov word [ecx], ax
add ecx, 2
inc edx
cmp edx, esi
jl 0x4935b0
mov ecx, dword [ebp - 0x960a8]
push ecx
call fcn.004efd7c
add esp, 4
lea edx, [ebp - 0x9608c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
test ebx, ebx
je 0x4936cf
push 0
push 0
push 0
push 0
push ebx
lea eax, [ebp - 0x9608c]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
test esi, esi
je 0x493786
lea ecx, [esi + 1]
push ecx
call fcn.004dbe65
add esp, 4
push 0
push 0
push esi
mov edi, eax
push edi
push ebx
lea edx, [ebp - 0x9608c]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x4936ab
push edi
call fcn.004f1ca3
add esp, 4
jmp 0x4936c9
mov ecx, dword [ebp - 0x960a0]
push ecx
push eax
push 1
push edi
call fcn.004f297b
call fcn.004f3d88
push edi
call fcn.004f1ca3
add esp, 0x14
mov edi, dword [ebp - 0x96090]
cmp edi, 0x32000
je 0x49350b
mov ecx, dword [ebp - 0x960a4]
push ecx
call fcn.004f27b0
mov edx, dword [ebp - 0x960a0]
push edx
call fcn.004f27b0
mov esi, dword [ebp - 0x9609c]
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
mov esi, dword [ebp - 0x96098]
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov byte [ebp - 4], 2
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493731
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x96094]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493754
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00493210
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f0194
mov esp, ebp
pop ebp
ret 0x34
mov edx, dword [ebp - 0x960a4]
push edx
call fcn.004f27b0
mov eax, dword [ebp - 0x960a0]
push eax
call fcn.004f27b0
mov esi, dword [ebp - 0x96098]
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 2
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4937ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x96094]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4937f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00493210
xor eax, eax
jmp 0x493768