Function at 0x496292
Capabilities:
Check if file exists
Create directory
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57197d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x411b0
call fcn.005374e0
push esi
push edi
mov dword [ebp - 0x41190], ecx
lea ecx, [ebp - 0x410f0]
call fcn.004e70a0
mov dword [ebp - 4], 0
call fcn.0055f60b
mov eax, dword [eax + 4]
mov dword [ebp - 0x410f8], eax
mov ecx, dword [0x5be480]
mov dword [ebp - 0x10], ecx
mov byte [ebp - 4], 1
mov edx, dword [0x5be480]
mov dword [ebp - 0x41100], edx
mov byte [ebp - 4], 2
mov eax, dword [0x5be480]
mov dword [ebp - 0x410fc], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x41140], ecx
mov edx, dword [ebp - 0x41140]
mov eax, dword [0x5be480]
mov dword [edx], eax
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x41144], ecx
mov edx, dword [ebp - 0x41144]
mov eax, dword [0x5be480]
mov dword [edx], eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x41148], ecx
mov edx, dword [ebp - 0x41148]
mov eax, dword [0x5be480]
mov dword [edx], eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x4114c], ecx
mov edx, dword [ebp - 0x4114c]
mov eax, dword [0x5be480]
mov dword [edx], eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x41150], ecx
mov edx, dword [ebp - 0x41150]
mov eax, dword [0x5be480]
mov dword [edx], eax
mov byte [ebp - 4], 4
push 0x5b4fdc
mov ecx, dword [ebp - 0x410f8]
add ecx, 0x13c
push ecx
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d5cd
mov dword [ebp - 0x41194], eax
mov eax, dword [ebp - 0x41194]
mov dword [ebp - 0x41198], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x41198]
push ecx
lea ecx, [ebp - 0x41100]
call fcn.0054d46f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4111c]
call fcn.0054d328
push 0x5b5000
mov edx, dword [ebp - 0x410f8]
add edx, 0x13c
push edx
lea eax, [ebp - 0x41124]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x41154], eax
mov ecx, dword [ebp - 0x41154]
mov edx, dword [ecx]
mov dword [ebp - 0x41158], edx
mov eax, dword [ebp - 0x41158]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x41120], al
lea ecx, [ebp - 0x41124]
call fcn.0054d328
mov ecx, dword [ebp - 0x41120]
and ecx, 0xff
test ecx, ecx
je 0x496480
push 0x5b5020
mov edx, dword [ebp - 0x410f8]
add edx, 0x13c
push edx
lea eax, [ebp - 0x41128]
push eax
call fcn.0054d5cd
mov dword [ebp - 0x4115c], eax
mov ecx, dword [ebp - 0x4115c]
mov edx, dword [ecx]
mov dword [ebp - 0x41160], edx
push 0
mov eax, dword [ebp - 0x41160]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea ecx, [ebp - 0x41128]
call fcn.0054d328
mov ecx, dword [ebp - 0x41190]
call fcn.004975bd
mov ecx, dword [ebp - 0x41100]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
jne 0x4964aa
mov edx, dword [ebp - 0x41100]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [0x5be480]
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 6
mov ecx, dword [0x5be480]
mov dword [ebp - 0x54], ecx
mov byte [ebp - 4], 7
mov word [ebp - 0x41104], 0xfeff
mov ecx, 0x10
mov esi, 0x5b5040
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x5b5080]
mov dword [ebp - 0x80], edx
mov eax, dword [0x5b5084]
mov dword [ebp - 0x7c], eax
mov cx, word [0x5b5088]
mov word [ebp - 0x78], cx
mov dword [ebp - 0x410f4], 0
jmp 0x496512
mov edx, dword [ebp - 0x410f4]
add edx, 1
mov dword [ebp - 0x410f4], edx
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x470]
mov dword [ebp - 0x41164], ecx
mov edx, dword [ebp - 0x410f4]
cmp edx, dword [ebp - 0x41164]
jge 0x4967e7
mov eax, dword [ebp - 0x410f4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x410f8]
mov edx, dword [ecx + 0x46c]
add edx, eax
mov dword [ebp - 0x41168], edx
mov eax, dword [ebp - 0x41168]
mov ecx, dword [eax]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x41168]
add edx, 4
push edx
lea ecx, [ebp - 0x70]
call fcn.0054d46f
mov eax, dword [ebp - 0x41168]
add eax, 8
push eax
lea ecx, [ebp - 0x6c]
call fcn.0054d46f
mov ecx, dword [ebp - 0x41168]
add ecx, 0xc
push ecx
lea ecx, [ebp - 0x68]
call fcn.0054d46f
mov edx, dword [ebp - 0x41168]
add edx, 0x10
push edx
lea ecx, [ebp - 0x64]
call fcn.0054d46f
mov eax, dword [ebp - 0x41168]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x41168]
add edx, 0x18
push edx
lea ecx, [ebp - 0x5c]
call fcn.0054d46f
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x4c0]
mov dword [ebp - 0x4116c], ecx
mov edx, dword [ebp - 0x4116c]
push edx
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x13c]
push ecx
push str._sUtilitiesBHOBHO_d.reg
lea edx, [ebp - 0x410fc]
push edx
call fcn.0054ab7c
add esp, 0x10
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
mov eax, dword [ebp - 0x410fc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x10e8], eax
cmp dword [ebp - 0x10e8], 0xffffffff
je 0x49669d
mov dword [ebp - 0x10e4], 0
mov dword [ebp - 0x10e0], 0
push 0
lea ecx, [ebp - 0x41110]
push ecx
push 2
lea edx, [ebp - 0x41104]
push edx
mov eax, dword [ebp - 0x10e8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x410f0]
call fcn.004ebff8
push 0x5b50c0
lea ecx, [ebp - 0x410f0]
call fcn.004ebff8
lea edx, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x410f0]
call fcn.004ebff8
push 0x5b50c4
lea ecx, [ebp - 0x410f0]
call fcn.004ebff8
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0054d46f
push 0x5b50cc
lea ecx, [ebp - 0x10]
call fcn.0054a808
mov dword [ebp - 0x41108], eax
mov ecx, dword [ebp - 0x41108]
push ecx
lea edx, [ebp - 0x4112c]
push edx
lea ecx, [ebp - 0x10]
call fcn.0054a76e
mov dword [ebp - 0x4119c], eax
mov eax, dword [ebp - 0x4119c]
mov dword [ebp - 0x411a0], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x411a0]
push ecx
lea ecx, [ebp - 0x10]
call fcn.0054d46f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4112c]
call fcn.0054d328
push ecx
mov ecx, esp
mov dword [ebp - 0x41130], esp
lea edx, [ebp - 0x10]
push edx
call fcn.0054d095
mov dword [ebp - 0x411a4], eax
lea ecx, [ebp - 0x410f0]
call fcn.004e7489
mov dword [ebp - 0x411a8], eax
mov eax, dword [ebp - 0x411a8]
mov dword [ebp - 0x4110c], eax
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41134], esp
lea edx, [ebp - 0x70]
push edx
call fcn.0054d095
mov dword [ebp - 0x411ac], eax
mov eax, dword [ebp - 0x4110c]
push eax
lea ecx, [ebp - 0x410f0]
call fcn.004e75e4
mov dword [ebp - 0x411b0], eax
cmp dword [ebp - 0x411b0], 0
je 0x49679b
push ecx
mov ecx, esp
mov dword [ebp - 0x41138], esp
lea edx, [ebp - 0x6c]
push edx
call fcn.0054d095
mov dword [ebp - 0x411b4], eax
lea ecx, [ebp - 0x410f0]
call fcn.004ebc04
mov eax, dword [ebp - 0x10e8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x410f8]
add ecx, 0x4b8
mov dword [ebp - 0x41174], ecx
mov edx, dword [ebp - 0x41174]
mov eax, dword [edx + 8]
mov dword [ebp - 0x41170], eax
lea ecx, [ebp - 0x410fc]
push ecx
mov edx, dword [ebp - 0x41170]
push edx
mov ecx, dword [ebp - 0x41174]
call fcn.0054c5b3
jmp 0x496503
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x4c0]
mov dword [ebp - 0x41178], ecx
cmp dword [ebp - 0x41178], 0
je 0x4969a9
mov edx, dword [ebp - 0x41100]
mov eax, dword [edx - 8]
mov dword [ebp - 0x4117c], eax
push 2
push 0
mov ecx, dword [ebp - 0x4117c]
push ecx
lea ecx, [ebp - 0x41100]
call fcn.0054d76d
push eax
call fcn.004e6af1
add esp, 0xc
mov dword [ebp - 0x41114], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x41100]
call fcn.0054d7bd
mov dword [ebp - 0x41118], 0
jmp 0x496862
mov edx, dword [ebp - 0x41118]
add edx, 1
mov dword [ebp - 0x41118], edx
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x4c0]
mov dword [ebp - 0x41180], ecx
mov edx, dword [ebp - 0x41118]
cmp edx, dword [ebp - 0x41180]
jge 0x496965
mov eax, dword [ebp - 0x410f8]
mov ecx, dword [eax + 0x4bc]
mov edx, dword [ebp - 0x41118]
lea eax, [ecx + edx*4]
push eax
lea ecx, [ebp - 0x410fc]
call fcn.0054d46f
lea ecx, [ebp - 0x410fc]
push ecx
lea ecx, [ebp - 0x54]
call fcn.004b257a
mov edx, dword [ebp - 0x410fc]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41184], eax
lea ecx, [ebp - 0x4113c]
push ecx
lea ecx, [ebp - 0x54]
call fcn.004b2df7
mov dword [ebp - 0x411b8], eax
mov edx, dword [ebp - 0x411b8]
mov dword [ebp - 0x41188], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x41188]
mov ecx, dword [eax]
mov dword [ebp - 0x4118c], ecx
push 2
push 0
mov edx, dword [ebp - 0x41184]
push edx
lea ecx, [ebp - 0x410fc]
call fcn.0054d76d
push eax
mov eax, dword [ebp - 0x4118c]
push eax
mov ecx, dword [ebp - 0x41114]
push ecx
call fcn.004e6c0e
add esp, 0x14
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4113c]
call fcn.0054d328
push 0xffffffffffffffff
lea ecx, [ebp - 0x410fc]
call fcn.0054d7bd
mov edx, dword [ebp - 0x410fc]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
jne 0x496960
mov eax, dword [ebp - 0x410fc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x496853
mov ecx, dword [ebp - 0x41114]
push ecx
call fcn.004e6e20
add esp, 4
and eax, 0xff
test eax, eax
je 0x496994
mov edx, dword [ebp - 0x41114]
push edx
call fcn.004e6d77
add esp, 4
mov dword [ebp - 0x411bc], eax
jmp 0x4969a9
mov eax, dword [ebp - 0x41114]
push eax
call fcn.004dff55
add esp, 4
mov dword [ebp - 0x411bc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x54]
call fcn.0054d328
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
call fcn.0054d328
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x5c]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.0054d328
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x68]
call fcn.0054d328
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6c]
call fcn.0054d328
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.0054d328
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x410fc]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x41100]
call fcn.0054d328
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410f0]
call fcn.004e71cb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret