Function at 0x49c213
Capabilities:
Create thread
Terminate thread

Disassembly:
push 0xb10
mov eax, 0x52f31c
call fcn.004f1db2
mov edi, ecx
mov ebx, dword [ebp + 8]
call fcn.00437474
push eax
lea ecx, [ebp - 0xaec]
call fcn.0043a4ef
lea eax, [ebp - 0xa38]
mov dword [ebp - 0xb1c], ebx
xor esi, esi
mov dword [ebp - 0xb14], eax
lea eax, [ebp - 0xb1c]
mov dword [ebp - 4], esi
push eax
mov dword [ebp - 0xb18], esi
mov dword [ebp - 0xb10], 0x53aa74
mov dword [ebp - 0xb0c], 0x50
mov dword [ebp - 0xb08], esi
mov dword [ebp - 0xb04], esi
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
test eax, eax
je 0x49c579
lea ecx, [ebp - 0xa38]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x49c560
call fcn.004cf6f3
test eax, eax
je 0x49c3b7
lea eax, [ebp - 0xa38]
push eax
call fcn.0049bf96
pop ecx
test al, al
jne 0x49c2d3
lea eax, [ebp - 0xa38]
push eax
call fcn.0049c023
pop ecx
test al, al
je 0x49c3b7
call fcn.00437474
push eax
lea ecx, [ebp - 0xaf4]
call fcn.0043a4ef
mov byte [ebp - 4], 1
call fcn.004ce6e9
push eax
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0xaf4]
push str.execptionpath_failfailpath_sis64_d
push eax
call fcn.0043ab29
mov esi, dword [ebp - 0xaf4]
lea ecx, [ebp - 0xaf0]
add esp, 0x10
push esi
call fcn.00487040
push 4
mov byte [ebp - 4], 2
call fcn.004b1c79
mov ebx, eax
pop ecx
mov dword [ebp - 0xaf8], ebx
mov byte [ebp - 4], 3
test ebx, ebx
je 0x49c34e
mov ecx, dword [ebp - 0xaf0]
add ecx, 0xfffffff0
push ecx
call fcn.0047a100
add eax, 0x10
pop ecx
mov dword [ebx], eax
jmp 0x49c350
xor ebx, ebx
mov eax, dword [edi + 0x1b0]
test eax, eax
je 0x49c376
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [edi + 0x1b0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [edi + 0x1b0], 0
push 0
push 0
push ebx
push 0x49c1b8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x30
push 0x53aadc
push 0x53aaf0
push 0
mov dword [edi + 0x1b0], eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xaf0]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
jmp 0x49c556
lea eax, [ebp - 0xafc]
mov dword [ebp - 0xafc], 0xc800000
push eax
lea eax, [ebp - 0xa38]
mov dword [ebp - 0xaf8], esi
push eax
call fcn.004ce312
pop ecx
pop ecx
test eax, eax
je 0x49c453
lea eax, [ebp - 0xa38]
push eax
call fcn.0043a8c3
pop ecx
push eax
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xaec]
call fcn.0043a84a
lea eax, [ebp - 0xaec]
push eax
call fcn.004cf906
mov esi, str.liebao
push esi
call fcn.0043a8c3
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaec]
call fcn.004516f5
lea eax, [ebp - 0xaec]
push eax
call fcn.004cf906
push dword [ebp - 0xaec]
call fcn.00416680
pop ecx
pop ecx
push eax
push dword [ebp - 0xaec]
lea ecx, [edi + 0xc]
call fcn.00417b50
jmp 0x49c579
call fcn.00437474
push eax
lea ecx, [ebp - 0xaf0]
call fcn.0043a4ef
movzx eax, word [ebp - 0xa38]
push eax
lea eax, [ebp - 0xaf0]
mov byte [ebp - 4], 4
push str._c:200M_
push eax
call fcn.0043ab29
add esp, 0xc
lea ecx, [ebp - 0xa80]
mov esi, 0x559c78
push esi
call fcn.00417260
push esi
lea ecx, [ebp - 0xa68]
mov byte [ebp - 4], 5
call fcn.00417260
lea ecx, [ebp - 0xae4]
mov byte [ebp - 4], 6
mov dword [ebp - 0xae8], 0x53a454
call fcn.00499c04
mov esi, dword [ebp - 0xaf0]
lea eax, [ebp - 0xa80]
push eax
lea eax, [ebp - 0xa68]
mov byte [ebp - 4], 7
push eax
mov eax, dword [ebp - 0xae8]
lea ecx, [ebp - 0xae8]
push 0
push 0x53ab5c
push esi
push ebx
call dword [eax]
lea ecx, [ebp - 0xae4]
call fcn.00499cb5
xor ebx, ebx
lea ecx, [ebp - 0xa68]
xor edi, edi
push ebx
inc edi
push edi
call fcn.00417d20
push ebx
push edi
lea ecx, [ebp - 0xa80]
call fcn.00417d20
mov dword [ebp - 0xa3c], 0xf
mov dword [ebp - 0xa40], ebx
mov byte [ebp - 0xa50], bl
lea eax, [ebp - 0xa50]
mov byte [ebp - 4], 8
push eax
push ebx
push edi
push 2
push str.execptioninsufficeient_disk_sapce
push ebx
push 0x6e
call fcn.004e8730
push ebx
push edi
lea ecx, [ebp - 0xa50]
call fcn.004178d0
lea ecx, [esi - 0x10]
call fcn.00436fdb
jmp 0x49c579
mov esi, 0x559c78
push esi
call fcn.0043a8c3
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaec]
call fcn.0043a84a
mov ecx, dword [ebp - 0xaec]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
call fcn.004f1d61
ret 4