Function at 0x49c684
Capabilities:
Create thread
Terminate thread

Disassembly:
push 0xb10
mov eax, 0x52f9c3
call fcn.004f2332
mov edi, ecx
mov ebx, dword [ebp + 8]
call fcn.00437474
push eax
lea ecx, [ebp - 0xaec]
call fcn.0043a4ef
lea eax, [ebp - 0xa38]
mov dword [ebp - 0xb1c], ebx
xor esi, esi
mov dword [ebp - 0xb14], eax
lea eax, [ebp - 0xb1c]
mov dword [ebp - 4], esi
push eax
mov dword [ebp - 0xb18], esi
mov dword [ebp - 0xb10], 0x53be1c
mov dword [ebp - 0xb0c], 0x50
mov dword [ebp - 0xb08], esi
mov dword [ebp - 0xb04], esi
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
test eax, eax
je 0x49c9ea
lea ecx, [ebp - 0xa38]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x49c9d1
call fcn.004cfbcc
test eax, eax
je 0x49c828
lea eax, [ebp - 0xa38]
push eax
call fcn.0049c407
pop ecx
test al, al
jne 0x49c744
lea eax, [ebp - 0xa38]
push eax
call fcn.0049c494
pop ecx
test al, al
je 0x49c828
call fcn.00437474
push eax
lea ecx, [ebp - 0xaf4]
call fcn.0043a4ef
mov byte [ebp - 4], 1
call fcn.004cebc2
push eax
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0xaf4]
push str.execptionpath_failfailpath_sis64_d
push eax
call fcn.0043ab29
mov esi, dword [ebp - 0xaf4]
lea ecx, [ebp - 0xaf0]
add esp, 0x10
push esi
call fcn.00487040
push 4
mov byte [ebp - 4], 2
call fcn.004b2155
mov ebx, eax
pop ecx
mov dword [ebp - 0xaf8], ebx
mov byte [ebp - 4], 3
test ebx, ebx
je 0x49c7bf
mov ecx, dword [ebp - 0xaf0]
add ecx, 0xfffffff0
push ecx
call fcn.0047a100
add eax, 0x10
pop ecx
mov dword [ebx], eax
jmp 0x49c7c1
xor ebx, ebx
mov eax, dword [edi + 0x1b0]
test eax, eax
je 0x49c7e7
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [edi + 0x1b0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [edi + 0x1b0], 0
push 0
push 0
push ebx
push 0x49c629
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x30
push 0x53be84
push 0x53be98
push 0
mov dword [edi + 0x1b0], eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xaf0]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
jmp 0x49c9c7
lea eax, [ebp - 0xafc]
mov dword [ebp - 0xafc], 0xc800000
push eax
lea eax, [ebp - 0xa38]
mov dword [ebp - 0xaf8], esi
push eax
call fcn.004ce7eb
pop ecx
pop ecx
test eax, eax
je 0x49c8c4
lea eax, [ebp - 0xa38]
push eax
call fcn.0043a8c3
pop ecx
push eax
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0xaec]
call fcn.0043a84a
lea eax, [ebp - 0xaec]
push eax
call fcn.004cfddf
mov esi, str.liebao
push esi
call fcn.0043a8c3
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaec]
call fcn.004516f5
lea eax, [ebp - 0xaec]
push eax
call fcn.004cfddf
push dword [ebp - 0xaec]
call fcn.00416680
pop ecx
pop ecx
push eax
push dword [ebp - 0xaec]
lea ecx, [edi + 0xc]
call fcn.00417b50
jmp 0x49c9ea
call fcn.00437474
push eax
lea ecx, [ebp - 0xaf0]
call fcn.0043a4ef
movzx eax, word [ebp - 0xa38]
push eax
lea eax, [ebp - 0xaf0]
mov byte [ebp - 4], 4
push str._c:200M_
push eax
call fcn.0043ab29
add esp, 0xc
lea ecx, [ebp - 0xa80]
mov esi, 0x55aff0
push esi
call fcn.00417260
push esi
lea ecx, [ebp - 0xa68]
mov byte [ebp - 4], 5
call fcn.00417260
lea ecx, [ebp - 0xae4]
mov byte [ebp - 4], 6
mov dword [ebp - 0xae8], 0x53b7fc
call fcn.0049a021
mov esi, dword [ebp - 0xaf0]
lea eax, [ebp - 0xa80]
push eax
lea eax, [ebp - 0xa68]
mov byte [ebp - 4], 7
push eax
mov eax, dword [ebp - 0xae8]
lea ecx, [ebp - 0xae8]
push 0
push 0x53bf04
push esi
push ebx
call dword [eax]
lea ecx, [ebp - 0xae4]
call fcn.0049a0d2
xor ebx, ebx
lea ecx, [ebp - 0xa68]
xor edi, edi
push ebx
inc edi
push edi
call fcn.00417d20
push ebx
push edi
lea ecx, [ebp - 0xa80]
call fcn.00417d20
mov dword [ebp - 0xa3c], 0xf
mov dword [ebp - 0xa40], ebx
mov byte [ebp - 0xa50], bl
lea eax, [ebp - 0xa50]
mov byte [ebp - 4], 8
push eax
push ebx
push edi
push 2
push str.execptioninsufficeient_disk_sapce
push ebx
push 0x6e
call fcn.004e8cb0
push ebx
push edi
lea ecx, [ebp - 0xa50]
call fcn.004178d0
lea ecx, [esi - 0x10]
call fcn.00436fdb
jmp 0x49c9ea
mov esi, 0x55aff0
push esi
call fcn.0043a8c3
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaec]
call fcn.0043a84a
mov ecx, dword [ebp - 0xaec]
lea ecx, [ecx - 0x10]
call fcn.00436fdb
call fcn.004f22e1
ret 4