Function at 0x4a04e0
Capabilities:
Check if file exists
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1a55
mov eax, dword fs:[0]
push eax
sub esp, 0x948
mov eax, dword [0x4eb00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x93c], ecx
mov eax, dword [ebp - 0x93c]
mov byte [eax + 0x4c], 0
push 0x4cab76
mov ecx, dword [ebp - 0x93c]
add ecx, 0x34
call fcn.00418ea0
push 0x64
push 0
lea ecx, [ebp - 0x94]
push ecx
call fcn.00433560
add esp, 0xc
push 0
push 0
lea edx, [ebp - 0x30]
push edx
call sym.Install_vip.exe_public:_static_bool___cdecl_CNsEncrypt::GetKey_unsigned_char__const__unsigned_int__unsigned_char_const__
add esp, 0xc
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x30]
push edx
call sym.Install_vip.exe_public:_static_bool___cdecl_CNsEncrypt::HfDecodeStr_unsigned_char_const___char_const___unsigned_char__
add esp, 0xc
mov byte [ebp - 0x941], al
movzx eax, byte [ebp - 0x941]
test eax, eax
je 0x4a058d
mov ecx, 1
imul edx, ecx, 0xf
movsx eax, byte [ebp + edx - 0x94]
test eax, eax
je 0x4a0594
xor al, al
jmp 0x4a0a4b
lea ecx, [ebp - 0x940]
call fcn.004253d0
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
push str.key_stype_d
lea eax, [ebp - 0x940]
push eax
call fcn.004253f0
add esp, 0x10
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::constructor_void_
mov byte [ebp - 4], 1
push 0x3e8
push 3
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::SetRetry_int__int_
push 0xbb8
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::SetTimeout_unsigned_long_int_
push 0x50
push 0x1f4
lea ecx, [ebp - 0x350]
push ecx
lea ecx, [ebp - 0x940]
call fcn.004195b0
push eax
lea ecx, [ebp - 0x940]
call fcn.00421dd0
push eax
mov ecx, dword [ebp - 0x93c]
add ecx, 4
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_int___thiscall_CNsNet::Post_wchar_t_const___void___int__char___int__int_
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x954], 0
jne 0x4a0675
mov byte [ebp - 0x942], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x942]
jmp 0x4a0a4b
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x350]
push eax
call fcn.0043fc60
add esp, 8
test eax, eax
je 0x4a06c2
mov byte [ebp - 0x943], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x943]
jmp 0x4a0a4b
mov ecx, dword [ebp - 0x93c]
add ecx, 0x14
push ecx
lea ecx, [ebp - 0x950]
call fcn.004a7a80
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4a0703
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x4cfc10
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call fcn.0043c75a
add esp, 8
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0x94c], 0
jne 0x4a076d
mov byte [ebp - 0x944], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a7ab0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x944]
jmp 0x4a0a4b
mov edx, dword [ebp - 0x94c]
push edx
call fcn.0043c850
add esp, 4
push 0
push 0
lea eax, [ebp - 0x760]
push eax
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call sym.Install_vip.exe_int___cdecl_FileTime_wchar_t_const___struct__SYSTEMTIME___struct__SYSTEMTIME___struct__SYSTEMTIME__
add esp, 0x10
push 0xc8
push 0
lea ecx, [ebp - 0x15c]
push ecx
call fcn.00433560
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x94]
push eax
movzx ecx, word [ebp - 0x754]
push ecx
movzx edx, word [ebp - 0x756]
push edx
movzx eax, word [ebp - 0x758]
push eax
movzx ecx, word [ebp - 0x75a]
push ecx
movzx edx, word [ebp - 0x75e]
push edx
movzx eax, word [ebp - 0x760]
push eax
push str.NS_04d_02d_02d_02d_02d_02d_s_s
lea ecx, [ebp - 0x15c]
push ecx
call fcn.0041cc80
add esp, 0x28
lea ecx, [ebp - 0x778]
call fcn.00419090
mov byte [ebp - 4], 3
lea edx, [ebp - 0x778]
push edx
push 0x3f
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x30]
push ecx
call sym.Install_vip.exe_public:_static_bool___cdecl_CNsEncrypt::HfEncodeStr_unsigned_char_const___unsigned_char_const___unsigned_int__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____
add esp, 0x10
lea ecx, [ebp - 0x778]
call fcn.00418de0
cmp eax, 0x80
je 0x4a088e
mov byte [ebp - 0x945], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.00418ec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a7ab0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x945]
jmp 0x4a0a4b
push 0x4cfc38
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
call fcn.0043c75a
add esp, 8
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0x94c], 0
jne 0x4a0907
mov byte [ebp - 0x946], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.00418ec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a7ab0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x946]
jmp 0x4a0a4b
mov edx, dword [ebp - 0x94c]
push edx
lea ecx, [ebp - 0x778]
call fcn.00418de0
push eax
push 1
lea ecx, [ebp - 0x778]
call fcn.00418e00
push eax
call fcn.0043c580
add esp, 0x10
mov eax, dword [ebp - 0x94c]
push eax
push 0x400
push 1
lea ecx, [ebp - 0x750]
push ecx
call fcn.0043c580
add esp, 0x10
mov edx, dword [ebp - 0x94c]
push edx
call fcn.0043c850
add esp, 4
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_char_const____thiscall_Json::StaticString::operator_char_const__void_const
push eax
mov ecx, dword [ebp - 0x93c]
call sym.Install_vip.exe_public:_bool___thiscall_CNsCode::WriteCodeEx_wchar_t_const__
movzx eax, al
test eax, eax
jne 0x4a09cb
mov byte [ebp - 0x947], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.00418ec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a7ab0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x947]
jmp 0x4a0a4b
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0x94]
cmp eax, 0x45
jne 0x4a09ff
mov ecx, dword [ebp - 0x93c]
mov byte [ecx + 0x4c], 1
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x93c]
add ecx, 0x34
call fcn.00418ea0
mov byte [ebp - 0x948], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x778]
call fcn.00418ec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x950]
call fcn.004a7ab0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x938]
call sym.Install_vip.exe_public:_void___thiscall_CNsNet::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.004192a0
mov al, byte [ebp - 0x948]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042e9de
mov esp, ebp
pop ebp
ret 8