Function at 0x4c0710
Capabilities:
Create directory
Delete file
Get common file path
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x652d70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x814
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x4c], ebx
xor esi, esi
mov eax, dword [ebp + 0x14]
mov dword [eax], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov byte [ebp - 0x15], 0
lea ecx, [ebp - 0x220]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov byte [ebp - 0x420], 0
push 0x1ff
push esi
lea edx, [ebp - 0x41f]
push edx
call fcn.006100a0
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 0x200
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, 0x200
ja 0x4c08cf
cmp eax, esi
je 0x4c08cf
lea ecx, [ebp - 0x420]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00415220
mov dword [ebp - 4], esi
push str.smail
lea ecx, [ebp - 0x14]
call fcn.004bfda0
push esi
push esi
push 0x1042
mov edx, dword [ebx + 4]
push edx
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
mov edi, eax
mov dword [ebp - 0x38], edi
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004bffd0
mov byte [ebp - 4], 3
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 5
mov ecx, 0x700724
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
call edx
add eax, 0x10
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 7
cmp edi, 0xffffffff
jne 0x4c08e7
mov byte [ebp - 4], 5
mov eax, dword [ebp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, edi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c0854
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c0877
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004c4950
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c08a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c08cf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push str.5BDBAF3E_769F_40BF_A0D6_F2D80F9121BA
lea ecx, [ebp - 0x1c]
call fcn.005b2cd0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x48], vtable.CLockMgr_class_CMutexWrapper_.0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], 1
call fcn.005b2cb0
mov byte [ebp - 4], 0xd
mov edx, dword [ebx + 0xb8]
mov eax, dword [edx + 4]
cmp edi, eax
ja 0x4c0978
test eax, eax
je 0x4c0978
push 0x30
push 0
lea eax, [ebp - 0x178]
push eax
call fcn.006100a0
add esp, 0xc
mov dword [ebp - 0x17c], 4
mov dword [ebp - 0x178], edi
lea ecx, [ebp - 0x17c]
push ecx
push 0
push 0x104b
mov edx, dword [ebx + 4]
push edx
call esi
mov eax, dword [ebp - 0x15c]
push eax
mov ecx, dword [ebx + 0xb8]
call fcn.004bd400
push eax
lea ecx, [ebp - 0x28]
call fcn.004078d0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x48], vtable.CLockMgr_class_CMutexWrapper_.0
lea ecx, [ebp - 0x1c]
call fcn.005b2bb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1c]
call fcn.005b2cc0
mov byte [ebp - 4], 0xe
push 0x66fe90
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.00614a04
add esp, 8
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x1a8], 0
test eax, eax
je 0x4c1218
push 2
push 0
mov esi, eax
push esi
call fcn.006167c5
push esi
call fcn.006166d6
lea esi, [eax - 0x12]
push 0
push 0x12
mov edx, dword [ebp - 0x2c]
push edx
call fcn.006167c5
lea eax, [esi + 0x1000]
push eax
call fcn.00611521
add esp, 0x20
mov dword [ebp - 0x30], eax
test eax, eax
je 0x4c151a
cmp esi, 0x96
jb 0x4c151a
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x1000
push 1
mov edx, eax
push edx
call fcn.00614929
add esp, 0x10
mov esi, eax
test esi, esi
je 0x4c1203
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x8c], edi
test esi, esi
je 0x4c0a6a
push ebx
push esi
mov eax, dword [ebp - 0x30]
lea ecx, [edi + eax]
push ecx
call fcn.005bd2f0
mov ebx, eax
add edi, esi
mov dword [ebp - 0x8c], edi
mov edx, dword [ebp - 0x2c]
push edx
push 0x1000
push 1
mov eax, dword [ebp - 0x30]
lea ecx, [edi + eax]
push ecx
call fcn.00614929
add esp, 0x1c
mov esi, eax
jmp 0x4c0a30
lea ecx, [ebp - 0x170]
call fcn.004c0600
mov byte [ebp - 4], 0xf
push edi
mov edx, dword [ebp - 0x30]
push edx
lea ecx, [ebp - 0x170]
call fcn.005b65e0
lea ecx, [ebp - 0x48]
call fcn.004bddb0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x170]
call fcn.005b5570
mov ecx, 0x700724
mov edx, dword [0x700724]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0x12
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, dword [ebp - 0x48]
mov esi, dword [ecx]
mov dword [ebp - 0x3c], esi
cmp esi, dword [ebp - 0x48]
je 0x4c11d6
mov edi, dword [esi + 8]
mov ecx, edi
call fcn.005b50f0
mov ecx, edi
test eax, eax
jne 0x4c0ec1
push str.Content_Type
call fcn.004bd790
mov dword [ebp - 0xec], 0xf
mov dword [ebp - 0xf0], ebx
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 0x13
cmp eax, ebx
je 0x4c0eab
push eax
push ebx
lea ecx, [ebp - 0x100]
call fcn.004bf120
cmp dword [ebp - 0xec], 0x10
mov eax, dword [ebp - 0x100]
jae 0x4c0b3b
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00405830
push ebx
push str.text_html
lea ecx, [ebp - 0x1c]
call fcn.004144e0
test eax, eax
jne 0x4c0cef
mov dword [ebp - 0xd0], 0xf
mov dword [ebp - 0xd4], ebx
mov byte [ebp - 0xe4], al
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0xe4]
push edx
mov ecx, edi
call fcn.005b56a0
xor eax, eax
mov word [ebp - 0x820], ax
push 0x3fe
push ebx
lea ecx, [ebp - 0x81e]
push ecx
call fcn.006100a0
add esp, 0xc
lea edx, [ebp - 0x820]
push edx
push 0x200
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x200
ja 0x4c0c63
cmp eax, ebx
je 0x4c0c63
lea eax, [ebp - 0x820]
push eax
push str._semail.tmp.html
lea ecx, [ebp - 0x20]
push ecx
call fcn.00405ab0
push 0x674758
mov edx, dword [ebp - 0x20]
push edx
call fcn.00614a04
add esp, 0x14
mov esi, eax
cmp esi, ebx
je 0x4c0c3b
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.004078d0
mov byte [ebp - 0x1a8], 1
cmp dword [ebp - 0xd0], 0x10
mov eax, dword [ebp - 0xe4]
jae 0x4c0c1c
lea eax, [ebp - 0xe4]
push esi
push 1
mov ecx, dword [ebp - 0xd4]
push ecx
push eax
call fcn.006161f6
push esi
call fcn.00615f4d
push esi
call fcn.0061466b
add esp, 0x18
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xe4]
call fcn.0041a2e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x100]
call fcn.0041a2e0
mov esi, dword [ebp - 0x3c]
mov esi, dword [esi]
jmp 0x4c0acc
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xe4]
call fcn.0041a2e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x100]
call fcn.0041a2e0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x48]
call fcn.004be880
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x170]
call fcn.004c0650
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x14]
call fcn.004014a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004014a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004c4950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004014a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004014a0
jmp 0x4c08cf
push ebx
push str.text_plain
lea ecx, [ebp - 0x1c]
call fcn.004144e0
test eax, eax
jne 0x4c0e92
mov dword [ebp - 0x58], 0xf
mov dword [ebp - 0x5c], ebx
mov byte [ebp - 0x6c], al
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x6c]
push edx
mov ecx, edi
call fcn.005b56a0
mov eax, dword [ebp - 0x5c]
add eax, eax
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.005fb5ce
mov esi, eax
mov eax, dword [ebp - 0x5c]
lea ecx, [eax*4]
push ecx
push ebx
push esi
call fcn.006100a0
add esp, 0x10
lea edx, [ebp - 0x11c]
push edx
mov ecx, edi
call fcn.004bfc70
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x108]
cmp eax, 0x10
mov ebx, dword [ebp - 0x11c]
jae 0x4c0dfd
lea ebx, [ebp - 0x11c]
mov edi, ebx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x11c]
call fcn.004bd760
push 0x614ce1
push ebx
mov ecx, dword [eax]
push ecx
push edi
lea edx, [ebp - 0x13c]
push edx
call fcn.004bde40
add esp, 0x14
push str.KOI8_R
lea ecx, [ebp - 0x11c]
call fcn.004bd730
test eax, eax
jne 0x4c0e08
test esi, esi
je 0x4c0e6c
cmp dword [ebp - 0x58], 0x10
mov eax, dword [ebp - 0x6c]
jae 0x4c0dd5
lea eax, [ebp - 0x6c]
mov ecx, dword [ebp - 0x5c]
lea edx, [ecx + ecx]
shr edx, 1
push edx
push esi
push 0xffffffffffffffff
push eax
push 0
push 0x5182
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push esi
lea ecx, [ebp - 0x1f8]
call fcn.004017e0
jmp 0x4c0e6c
mov edi, dword [ebp - 0x11c]
jmp 0x4c0d82
push 0x674730
lea ecx, [ebp - 0x11c]
call fcn.004bd730
test eax, eax
jne 0x4c0e54
test esi, esi
je 0x4c0e6c
cmp dword [ebp - 0x58], 0x10
mov eax, dword [ebp - 0x6c]
jae 0x4c0e2c
lea eax, [ebp - 0x6c]
mov ecx, dword [ebp - 0x5c]
lea edx, [ecx + ecx]
shr edx, 1
push edx
push esi
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push esi
lea ecx, [ebp - 0x1f8]
call fcn.004017e0
jmp 0x4c0e6c
cmp dword [ebp - 0x58], 0x10
mov eax, dword [ebp - 0x6c]
jae 0x4c0e60
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00405830
push esi
call fcn.0060faf6
add esp, 4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x11c]
call fcn.0041a2e0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x6c]
call fcn.0041a2e0
xor ebx, ebx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x100]
call fcn.0041a2e0
mov esi, dword [ebp - 0x3c]
mov esi, dword [esi]
jmp 0x4c0acc
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x100]
call fcn.0041a2e0
mov esi, dword [esi]
jmp 0x4c0acc
call fcn.004bfd30
test al, al
je 0x4c11cc
lea eax, [ebp - 0x88]
push eax
mov ecx, edi
call fcn.004bfcd0
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x78]
add eax, eax
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.005fb5ce
mov esi, eax
mov eax, dword [ebp - 0x78]
lea ecx, [eax*4]
push ecx
push ebx
push esi
call fcn.006100a0
add esp, 0x10
push str.Content_Type
mov ecx, edi
call fcn.004bd7d0
push eax
lea ecx, [ebp - 0xc8]
call fcn.0041f6e0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xb4]
cmp eax, 0x10
jb 0x4c0f44
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x50], edx
jmp 0x4c0f4d
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x50], ecx
cmp eax, 0x10
mov ebx, dword [ebp - 0xc8]
jae 0x4c0f5e
lea ebx, [ebp - 0xc8]
lea edx, [ebp - 0x148]
push edx
lea ecx, [ebp - 0xc8]
call fcn.004bd760
push 0x614ce1
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [eax]
push edx
push ebx
lea eax, [ebp - 0x144]
push eax
call fcn.004bde40
add esp, 0x14
push str.KOI8_R
lea ecx, [ebp - 0xc8]
call fcn.004bd730
test eax, eax
jne 0x4c0fd0
test esi, esi
je 0x4c1042
cmp dword [ebp - 0x74], 0x10
mov eax, dword [ebp - 0x88]
jae 0x4c0fba
lea eax, [ebp - 0x88]
mov ecx, dword [ebp - 0x78]
lea edx, [ecx + ecx]
shr edx, 1
push edx
push esi
push 0xffffffffffffffff
push eax
push 0
push 0x5182
jmp 0x4c1033
push 0x674730
lea ecx, [ebp - 0xc8]
call fcn.004bd730
test eax, eax
jne 0x4c1010
test esi, esi
je 0x4c1042
cmp dword [ebp - 0x74], 0x10
mov eax, dword [ebp - 0x88]
jae 0x4c0ffa
lea eax, [ebp - 0x88]
mov ecx, dword [ebp - 0x78]
lea edx, [ecx + ecx]
shr edx, 1
push edx
push esi
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
jmp 0x4c1033
cmp dword [ebp - 0x74], 0x10
mov eax, dword [ebp - 0x88]
jae 0x4c1022
lea eax, [ebp - 0x88]
mov ecx, dword [ebp - 0x78]
lea edx, [ecx + ecx]
shr edx, 1
push edx
push esi
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push esi
lea ecx, [ebp + 0x14]
call fcn.004017a0
push 0x66f118
lea ecx, [ebp + 0x14]
call fcn.004017a0
mov byte [ebp - 0x15], 1
push 0
lea ecx, [ebp - 0x14]
call fcn.00404c30
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
test eax, eax
je 0x4c111f
cmp eax, 0xb7
je 0x4c111f
cmp eax, 0x50
je 0x4c111f
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.0041a2e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x88]
call fcn.0041a2e0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x48]
call fcn.004be880
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x170]
call fcn.004c0650
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x14]
call fcn.004014a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004014a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004c4950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004014a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004014a0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [ebp - 0x124], 0xf
mov dword [ebp - 0x128], 0
mov byte [ebp - 0x138], 0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x14]
call fcn.00404c30
push eax
lea ecx, [ebp - 0x138]
call fcn.004be850
push 0x66f168
lea ecx, [ebp - 0x138]
call fcn.004be850
push esi
mov ecx, dword [ebp - 0x4c]
call fcn.004bd360
push eax
lea ecx, [ebp - 0x138]
call fcn.004be850
push esi
call fcn.0060faf6
add esp, 4
cmp dword [ebp - 0x124], 0x10
mov eax, dword [ebp - 0x138]
jae 0x4c1195
lea eax, [ebp - 0x138]
push eax
mov ecx, edi
call fcn.005b4cc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x138]
call fcn.0041a2e0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.0041a2e0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x88]
call fcn.0041a2e0
xor ebx, ebx
mov esi, dword [ebp - 0x3c]
mov esi, dword [esi]
jmp 0x4c0acc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
call fcn.004014a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x48]
call fcn.004be880
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x170]
call fcn.004c0650
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
push eax
call fcn.0060faf6
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0061466b
add esp, 8
mov dword [ebp - 4], 7
push 0x66eba8
lea ecx, [ebp - 0x24]
call fcn.0040bea0
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebx + 0x94]
push ecx
push edi
lea ecx, [ebx + 4]
call fcn.004a2c80
mov edx, dword [ebp - 0x1f8]
mov eax, dword [edx - 0xc]
cmp eax, 7
jle 0x4c1298
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx - 0xc]
add ecx, 0xfffffff9
js 0x4c1298
cmp ecx, eax
jg 0x4c1298
push 0x674720
lea edx, [edx + ecx*2]
push edx
call fcn.00612c90
add esp, 8
test eax, eax
je 0x4c1298
sub eax, dword [ebp - 0x1f8]
sar eax, 1
cmp eax, 0xffffffff
je 0x4c1298
push 0x672aa0
push 0x674720
lea ecx, [ebp - 0x1f8]
call fcn.004287f0
lea eax, [ebp - 0x24]
push eax
push 2
push edi
lea ecx, [ebx + 4]
call fcn.004a2c80
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x1f4]
call fcn.004078d0
lea edx, [ebp - 0x24]
push edx
push 3
push edi
lea ecx, [ebx + 4]
call fcn.004a2c80
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.004078d0
lea ecx, [ebp - 0x24]
push ecx
push 1
push edi
lea ecx, [ebx + 4]
call fcn.004a2c80
lea edx, [ebp - 0x24]
push edx
lea ecx, [ebp - 0x1ec]
call fcn.004078d0
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.004078d0
mov ecx, dword [0x713bfc]
mov dword [ebp - 0x1b0], ecx
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x1a7], dl
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00405830
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x218]
call fcn.004be200
push 0x66f16a
lea ecx, [ebp - 0x20]
push ecx
call fcn.0040b580
add esp, 8
test al, al
je 0x4c1358
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040aab0
mov byte [ebp - 4], 0x1c
mov edi, dword [ebp - 0x34]
mov eax, dword [edi - 0xc]
lea ecx, [eax + eax + 4]
push ecx
call fcn.00611521
add esp, 4
mov esi, eax
cmp dword [edi - 4], 1
jle 0x4c1392
mov edx, dword [edi - 0xc]
push edx
lea ecx, [ebp - 0x34]
call fcn.00401370
mov edi, dword [ebp - 0x34]
mov ecx, edi
mov edx, esi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4c1396
mov eax, dword [ebp - 0x34]
mov eax, dword [eax - 0xc]
xor ecx, ecx
mov word [esi + eax*2 + 2], cx
mov dword [ebp - 0xac], ecx
xor eax, eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov word [ebp - 0x90], ax
mov dword [ebp - 0xa8], 3
mov dword [ebp - 0xa4], esi
mov edx, 0x614
mov word [ebp - 0x9c], dx
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push esi
call fcn.0061056f
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c1444
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c1467
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c148a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c14ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004c4950
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c14df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c1505
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0061466b
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x14]
call fcn.004014a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004014a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x218]
call fcn.004c4950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.004014a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004014a0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10