Function at 0x4d8930
Capabilities:
Check if file exists
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x658521
mov eax, dword fs:[0]
push eax
sub esp, 0x538
mov eax, dword [0x6dc0b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x50c], eax
test eax, eax
jne 0x4d8971
xor al, al
jmp 0x4d8be8
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.005e0dd0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0
push 0x1c
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x518]
call fcn.0049f410
push str.Thorzip
lea ecx, [ebp - 0x518]
mov dword [ebp - 4], 0
call fcn.0049f700
mov edi, dword [ebp - 0x518]
push edi
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x4d89e1
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push str.FilterList.data
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0x538]
call fcn.0049f250
add esp, 4
mov byte [ebp - 4], 1
mov esi, dword [ebp - 0x538]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4d8a16
xor bl, bl
jmp 0x4d8bd7
lea ecx, [ebp - 0x2e4]
call fcn.0054a232
push 1
push 0x74
push esi
lea eax, [ebp - 0x544]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x2e4]
call fcn.0054b745
lea ecx, [ebp - 0x544]
call fcn.0054a2d0
test al, al
jne 0x4d8a52
xor bl, bl
jmp 0x4d8bcc
push 0
push str.FilterListCfg
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.0054a79c
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x504]
call fcn.0054b26f
lea ecx, [ebp - 0x4fc]
call fcn.0054a2f6
test eax, eax
je 0x4d8bca
push 0x6aa980
push 0
push str.ExtName
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.0054a72b
mov ecx, eax
call fcn.0054a6ea
push eax
lea eax, [ebp - 0x4f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0
push 0
push str.Level
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.0054a72b
mov ecx, eax
call fcn.0054a701
push 0
push 0
mov dword [ebp - 0x2f0], eax
lea ecx, [ebp - 0x4fc]
push str.FileType
lea eax, [ebp - 0x524]
push eax
call fcn.0054a72b
mov ecx, eax
call fcn.0054a6c0
push 0
push 0
mov dword [ebp - 0x2ec], eax
lea ecx, [ebp - 0x4fc]
push str.ParentNode
lea eax, [ebp - 0x528]
push eax
call fcn.0054a72b
mov ecx, eax
call fcn.0054a6a0
mov byte [ebp - 0x2e8], al
mov eax, dword [ebp - 0x2ec]
push 0x214
mov dword [ebp - 0x508], eax
call fcn.005e74a6
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4d8c04
mov eax, dword [ebp - 0x508]
lea esi, [ebp - 0x4f8]
mov ecx, 0x85
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x50c]
lea eax, [eax + eax*2]
lea esi, [ecx + eax*4]
mov ecx, esi
call fcn.00403980
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [eax + ecx*4], ebx
lea eax, [ebp - 0x52c]
inc dword [esi + 4]
lea ecx, [ebp - 0x4fc]
push eax
call fcn.0054b93e
lea ecx, [ebp - 0x4fc]
mov eax, dword [eax]
mov dword [ebp - 0x4fc], eax
call fcn.0054a2f6
test eax, eax
jne 0x4d8a90
mov esi, dword [ebp - 0x538]
mov edi, dword [ebp - 0x518]
mov bl, 1
lea ecx, [ebp - 0x2e4]
call fcn.0054a277
push esi
call fcn.00545b61
push edi
call fcn.00545b61
add esp, 8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00545b50
mov esp, ebp
pop ebp
ret
push 0x6d8324
lea eax, [ebp - 0x4fd]
push eax
call fcn.005e0fac
int3