Function at 0x48f320
Capabilities:
Check if file exists
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ecc1d
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1c2c
call fcn.004c0dd0
mov eax, dword [0x51eed4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1af0], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.00481e90
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.00402ab0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc4]
call fcn.00480c00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00480c00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x50]
call fcn.00402ab0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00480c00
mov byte [ebp - 4], 6
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0x15], 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe4]
call fcn.00480c70
mov byte [ebp - 4], 7
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.00480c70
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1af0]
add ecx, dword [eax + 4]
call fcn.00480e10
push eax
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x1af0]
lea ecx, [ecx + eax + 0x1c]
call fcn.00480e10
push eax
push str.SELECT__FROM__user_locker_data__where__UserID____s_AND__GUID____s_AND__IsDeleted_0_ORDER_BY__Directory__DESC_
lea edx, [ebp - 0x8c]
push edx
call fcn.00485c10
add esp, 0x10
lea ecx, [ebp - 0x8c]
call fcn.004a0090
push eax
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.0049f4c0
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
call fcn.00489740
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a7b20
mov byte [ebp - 0x1af1], al
movzx ecx, byte [ebp - 0x1af1]
test ecx, ecx
je 0x4900d4
push 1
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a84b0
mov dword [ebp - 0x1af8], eax
mov ecx, dword [ebp - 0x1af8]
push ecx
lea ecx, [ebp - 0xc4]
call fcn.00480d30
push 2
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a84b0
mov dword [ebp - 0x1afc], eax
mov ecx, dword [ebp - 0x1afc]
push ecx
lea ecx, [ebp - 0x88]
call fcn.00480d30
push 2
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b00], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1930], esp
mov edx, dword [ebp - 0x1b00]
push edx
call fcn.00480c70
mov dword [ebp - 0x1b04], eax
lea eax, [ebp - 0x194c]
push eax
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x1b08], eax
mov ecx, dword [ebp - 0x1b08]
mov dword [ebp - 0x1b0c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x1b0c]
push edx
lea eax, [ebp - 0x1968]
push eax
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x1b10], eax
mov ecx, dword [ebp - 0x1b10]
mov dword [ebp - 0x1b14], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x1b14]
push edx
lea ecx, [ebp - 0x50]
call fcn.00405f40
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1968]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x194c]
call fcn.00480cf0
push 3
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b18], eax
mov edx, dword [ebp - 0x1b18]
push edx
lea ecx, [ebp - 0x6c]
call fcn.00480d30
push 5
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a8300
mov dword [ebp - 0x1b1c], eax
cmp dword [ebp - 0x1b1c], 0
setne dl
mov byte [ebp - 0xc5], dl
push 4
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a8300
mov dword [ebp - 0x1b20], eax
cmp dword [ebp - 0x1b20], 0
setne dl
mov byte [ebp - 0x15], dl
push 7
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a8390
mov dword [ebp - 0x1b28], eax
mov dword [ebp - 0x1b24], edx
mov edx, dword [ebp - 0x1b28]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x1b24]
mov dword [ebp - 0xec], eax
movzx ecx, byte [ebp - 0x15]
test ecx, ecx
jne 0x48f7f2
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1b2c], eax
mov edx, dword [ebp - 0x1b2c]
mov dword [ebp - 0x1970], edx
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x1970], 0
je 0x48f6fd
sub esp, 0x1c
mov dword [ebp - 0x1b30], esp
mov dword [ebp - 0x1974], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1978], esp
lea eax, [ebp - 0x50]
push eax
call fcn.00402b70
mov dword [ebp - 0x1b34], eax
mov ecx, dword [ebp - 0x1b30]
push ecx
mov edx, dword [ebp - 0x1af0]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x1af0]
mov edx, dword [eax + 0x10]
mov eax, dword [edx]
mov edx, dword [eax + 0x4c]
call edx
mov dword [ebp - 0x1b38], eax
mov eax, dword [ebp - 0x1b38]
mov dword [ebp - 0x1b3c], eax
mov ecx, dword [ebp - 0x1970]
call fcn.004897d0
mov dword [ebp - 0x1b40], eax
mov ecx, dword [ebp - 0x1b40]
mov dword [ebp - 0x1b44], ecx
jmp 0x48f707
mov dword [ebp - 0x1b44], 0
mov edx, dword [ebp - 0x1b44]
mov dword [ebp - 0x196c], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [ebp - 0x196c]
mov dword [eax + 4], ecx
push 0x4f33c8
mov edx, dword [ebp - 0x1af0]
mov ecx, dword [edx + 4]
call fcn.004897b0
mov dword [ebp - 0x1b48], eax
lea eax, [ebp - 0x1994]
push eax
mov ecx, dword [ebp - 0x1b48]
call fcn.00402230
mov dword [ebp - 0x1b4c], eax
mov ecx, dword [ebp - 0x1b4c]
mov dword [ebp - 0x1b50], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x1b50]
push edx
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1994]
call fcn.00402bb0
mov eax, dword [ebp - 0x1af0]
cmp dword [eax + 4], 0
je 0x48f7ed
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x199c], edx
mov eax, dword [ebp - 0x199c]
mov dword [ebp - 0x1998], eax
cmp dword [ebp - 0x1998], 0
je 0x48f7d6
push 1
mov ecx, dword [ebp - 0x1998]
call fcn.0049f490
mov dword [ebp - 0x1b54], eax
mov ecx, dword [ebp - 0x1b54]
mov dword [ebp - 0x1b58], ecx
jmp 0x48f7e0
mov dword [ebp - 0x1b58], 0
mov edx, dword [ebp - 0x1af0]
mov dword [edx + 4], 0
jmp 0x48f988
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1b5c], eax
mov eax, dword [ebp - 0x1b5c]
mov dword [ebp - 0x19a4], eax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x19a4], 0
je 0x48f898
sub esp, 0x1c
mov dword [ebp - 0x1b60], esp
mov dword [ebp - 0x19a8], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x19ac], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00402b70
mov dword [ebp - 0x1b64], eax
mov eax, dword [ebp - 0x1b60]
push eax
mov ecx, dword [ebp - 0x1af0]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1b68], eax
mov ecx, dword [ebp - 0x1b68]
mov dword [ebp - 0x1b6c], ecx
mov ecx, dword [ebp - 0x19a4]
call fcn.004897d0
mov dword [ebp - 0x1b70], eax
mov edx, dword [ebp - 0x1b70]
mov dword [ebp - 0x1b74], edx
jmp 0x48f8a2
mov dword [ebp - 0x1b74], 0
mov eax, dword [ebp - 0x1b74]
mov dword [ebp - 0x19a0], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ebp - 0x19a0]
mov dword [ecx + 4], edx
push 0x4f33d0
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x1b78], eax
lea ecx, [ebp - 0x19c8]
push ecx
mov ecx, dword [ebp - 0x1b78]
call fcn.00402230
mov dword [ebp - 0x1b7c], eax
mov edx, dword [ebp - 0x1b7c]
mov dword [ebp - 0x1b80], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1b80]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x19c8]
call fcn.00402bb0
mov ecx, dword [ebp - 0x1af0]
cmp dword [ecx + 4], 0
je 0x48f988
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 4]
mov dword [ebp - 0x19d0], eax
mov ecx, dword [ebp - 0x19d0]
mov dword [ebp - 0x19cc], ecx
cmp dword [ebp - 0x19cc], 0
je 0x48f971
push 1
mov ecx, dword [ebp - 0x19cc]
call fcn.0049f490
mov dword [ebp - 0x1b84], eax
mov edx, dword [ebp - 0x1b84]
mov dword [ebp - 0x1b88], edx
jmp 0x48f97b
mov dword [ebp - 0x1b88], 0
mov eax, dword [ebp - 0x1af0]
mov dword [eax + 4], 0
push 0x4f33d8
lea ecx, [ebp - 0x34]
call fcn.004a0130
mov dword [ebp - 0x1b8c], eax
cmp dword [ebp - 0x1b8c], 0
jne 0x48f9b2
mov byte [ebp - 4], 8
jmp 0x48f469
mov byte [ebp - 4], 0x10
movzx ecx, byte [ebp - 0x15]
test ecx, ecx
jne 0x48ffe2
lea ecx, [ebp - 0x10c]
call fcn.00480c00
mov dword [ebp - 0x1b90], eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x914], 0xffffffff
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x19ec]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1b94], eax
mov edx, dword [ebp - 0x1b94]
mov dword [ebp - 0x1b98], edx
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1b98]
call fcn.00480e10
mov dword [ebp - 0x1b9c], eax
mov eax, dword [ebp - 0x1b9c]
push eax
push 0x4f33e0
lea ecx, [ebp - 0x1920]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x19ec]
call fcn.00480cf0
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1a08]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1ba0], eax
mov edx, dword [ebp - 0x1ba0]
mov dword [ebp - 0x1ba4], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1ba4]
call fcn.00480e10
mov dword [ebp - 0x1ba8], eax
mov eax, dword [ebp - 0x1ba8]
push eax
push 0x4f33e8
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a08]
call fcn.00480cf0
push 0
push 2
push 2
push 0
push 0
push 2
lea edx, [ebp - 0x1120]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 0xffffffff
jne 0x48faff
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10c]
call fcn.00480cf0
mov byte [ebp - 4], 9
jmp 0x48f46d
mov eax, dword [ebp - 0x914]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x918], 0
mov dword [ebp - 0x1a0c], 0x12
mov edx, dword [ebp - 0x1a0c]
push edx
call fcn.004c0518
add esp, 4
mov dword [ebp - 0x1bac], eax
mov eax, dword [ebp - 0x1bac]
mov dword [ebp - 0x1a10], eax
cmp dword [ebp - 0x1a10], 0
je 0x48fb7d
mov ecx, dword [ebp - 0x1a0c]
push ecx
push 0
mov edx, dword [ebp - 0x1a10]
push edx
call fcn.004bfe20
add esp, 0xc
mov eax, dword [ebp - 0x1a10]
mov dword [ebp - 0x1bb0], eax
jmp 0x48fb87
mov dword [ebp - 0x1bb0], 0
mov ecx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x91c], ecx
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1a30]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1bb4], eax
mov edx, dword [ebp - 0x1bb4]
mov dword [ebp - 0x1bb8], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1bb8]
call fcn.00480e10
mov dword [ebp - 0x1bbc], eax
mov eax, dword [ebp - 0x1bbc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x1a14], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a30]
call fcn.00480cf0
cmp dword [ebp - 0x1a14], 0
je 0x48fcf3
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x1a4c]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1bc0], eax
mov ecx, dword [ebp - 0x1bc0]
mov dword [ebp - 0x1bc4], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1bc4]
call fcn.00480e10
mov dword [ebp - 0x1bc8], eax
mov edx, dword [ebp - 0x1bc8]
push edx
push 0x4f3400
lea eax, [ebp - 0x910]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a4c]
call fcn.00480cf0
lea ecx, [ebp - 0x918]
push ecx
lea edx, [ebp - 0x910]
push edx
call fcn.0048d6c0
add esp, 8
mov eax, dword [ebp - 0x918]
push eax
push 0x4f3408
mov ecx, dword [ebp - 0x91c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov edx, dword [ebp - 0x91c]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00480d30
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call fcn.004a3ac0
add esp, 8
mov byte [ebp - 0x1bc9], al
movzx edx, byte [ebp - 0x1bc9]
test edx, edx
je 0x48fcf3
lea eax, [ebp - 0x1120]
push eax
lea ecx, [ebp - 0x1920]
push ecx
call fcn.004c2b74
add esp, 8
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x1a50], edx
mov eax, dword [ebp - 0x1a50]
push eax
call fcn.004c0415
add esp, 4
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1a70]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1bd0], eax
mov ecx, dword [ebp - 0x1bd0]
mov dword [ebp - 0x1bd4], ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1bd4]
call fcn.00480e10
mov dword [ebp - 0x1bd8], eax
mov edx, dword [ebp - 0x1bd8]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1a51], al
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a70]
call fcn.00480cf0
movzx eax, byte [ebp - 0x1a51]
test eax, eax
je 0x48ffd1
push 1
mov ecx, dword [ebp - 0x1af0]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x84]
call eax
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1bdc], eax
mov ecx, dword [ebp - 0x1bdc]
mov dword [ebp - 0x1a78], ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1a78], 0
je 0x48fea0
sub esp, 0x1c
mov dword [ebp - 0x1be0], esp
mov dword [ebp - 0x1a7c], esp
push 1
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp - 0xf0]
push eax
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a80], esp
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1be4], eax
mov ecx, dword [ebp - 0x1be4]
mov dword [ebp - 0x1be8], ecx
mov byte [ebp - 4], 0x18
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a84], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00402b70
mov dword [ebp - 0x1bec], eax
mov eax, dword [ebp - 0x1be0]
push eax
mov ecx, dword [ebp - 0x1af0]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov byte [ebp - 4], 0x17
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x1bf0], eax
mov ecx, dword [ebp - 0x1bf0]
mov dword [ebp - 0x1bf4], ecx
mov ecx, dword [ebp - 0x1a78]
call fcn.004897d0
mov dword [ebp - 0x1bf8], eax
mov edx, dword [ebp - 0x1bf8]
mov dword [ebp - 0x1bfc], edx
jmp 0x48feaa
mov dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0x1bfc]
mov dword [ebp - 0x1a74], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ebp - 0x1a74]
mov dword [ecx + 4], edx
push 0x4f3410
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x1c00], eax
lea ecx, [ebp - 0x1aa0]
push ecx
mov ecx, dword [ebp - 0x1c00]
call fcn.00402230
mov dword [ebp - 0x1c04], eax
mov edx, dword [ebp - 0x1c04]
mov dword [ebp - 0x1c08], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x1c08]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1aa0]
call fcn.00402bb0
mov ecx, dword [ebp - 0x1af0]
cmp dword [ecx + 4], 0
je 0x48ff90
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 4]
mov dword [ebp - 0x1aa8], eax
mov ecx, dword [ebp - 0x1aa8]
mov dword [ebp - 0x1aa4], ecx
cmp dword [ebp - 0x1aa4], 0
je 0x48ff79
push 1
mov ecx, dword [ebp - 0x1aa4]
call fcn.0049f490
mov dword [ebp - 0x1c0c], eax
mov edx, dword [ebp - 0x1c0c]
mov dword [ebp - 0x1c10], edx
jmp 0x48ff83
mov dword [ebp - 0x1c10], 0
mov eax, dword [ebp - 0x1af0]
mov dword [eax + 4], 0
push 0x4f3418
lea ecx, [ebp - 0x34]
call fcn.004a0130
mov dword [ebp - 0x1c14], eax
cmp dword [ebp - 0x1c14], 0
jne 0x48ffbb
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x48ffd1
lea edx, [ebp - 0x1920]
push edx
lea eax, [ebp - 0x1120]
push eax
call fcn.004c2b74
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10c]
call fcn.00480cf0
jmp 0x490044
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1ac4]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c18], eax
mov ecx, dword [ebp - 0x1c18]
mov dword [ebp - 0x1c1c], ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1c1c]
call fcn.00480e10
mov dword [ebp - 0x1c20], eax
push 0
mov edx, dword [ebp - 0x1c20]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1ac4]
call fcn.00480cf0
jmp 0x4900c1
mov dword [ebp - 4], 9
jmp 0x4900cf
jmp 0x48f46d
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7d50
jmp 0x490114
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1af0]
add ecx, dword [edx + 4]
call fcn.00480e10
push eax
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x1af0]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
push eax
push str.SELECT__FROM__user_locker_data__where__UserID____s_AND__GUID____s_AND__IsDeleted_1_ORDER_BY__Directory__DESC_
lea ecx, [ebp - 0x8c]
push ecx
call fcn.00485c10
add esp, 0x10
lea ecx, [ebp - 0x8c]
call fcn.004a0090
push eax
mov edx, dword [ebp - 0x1af0]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.0049f4c0
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
call fcn.00489740
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7b20
mov byte [ebp - 0x1c29], al
movzx eax, byte [ebp - 0x1c29]
test eax, eax
je 0x49025f
push 1
mov ecx, dword [ebp - 0x1af0]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1c30], eax
mov eax, dword [ebp - 0x1c30]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00480d30
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1ae8]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov dword [ebp - 0x1c38], ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x1c38]
call fcn.00480e10
mov dword [ebp - 0x1c3c], eax
mov edx, dword [ebp - 0x1c3c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1ae8]
call fcn.00480cf0
jmp 0x490253
mov dword [ebp - 4], 0x1d
jmp 0x49018f
mov eax, dword [ebp - 0x1af0]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7d50
jmp 0x49029f
mov dword [ebp - 4], 8
mov byte [ebp - 0x1ae9], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa8]
call fcn.00480cf0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe4]
call fcn.00480cf0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00480cf0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x50]
call fcn.00402bb0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00480cf0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc4]
call fcn.00480cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.00402bb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.00487c30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call fcn.00480cf0
mov al, byte [ebp - 0x1ae9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004be1d6
mov esp, ebp
pop ebp
ret 0x2c