Function at 0x490350
Capabilities:
Check if file exists
Create directory
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ecd81
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1c8c
call fcn.004c0dd0
mov eax, dword [0x51eed4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1b30], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.00481e90
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.00402ab0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc4]
call fcn.00480c00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00480c00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x50]
call fcn.00402ab0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00480c00
mov byte [ebp - 4], 6
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0x15], 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xe4]
call fcn.00480c70
mov byte [ebp - 4], 7
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.00480c70
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.004aa1c0
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1b30]
add ecx, dword [edx + 4]
call fcn.00480e10
push eax
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x1b30]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
push eax
push str.UPDATE__user_locker_data__SET__IsDeleted__0_WHERE__UserID____s_AND__GUID____s_
lea ecx, [ebp - 0x8c]
push ecx
call fcn.00485c10
add esp, 0x10
lea ecx, [ebp - 0x8c]
call fcn.004a0090
push eax
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.0049f4c0
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
call fcn.00489740
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a9c70
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1b30]
add edx, dword [ecx + 4]
mov ecx, edx
call fcn.00480e10
push eax
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x1b30]
lea ecx, [eax + edx + 0x1c]
call fcn.00480e10
push eax
push str.SELECT__FROM__user_locker_data__where__UserID____s_AND__GUID____s_ORDER_BY__Directory__DESC_
lea ecx, [ebp - 0x8c]
push ecx
call fcn.00485c10
add esp, 0x10
lea ecx, [ebp - 0x8c]
call fcn.004a0090
push eax
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 8]
mov ecx, dword [eax + 4]
call fcn.0049f4c0
push 0xffffffffffffffff
lea ecx, [ebp - 0x8c]
call fcn.00489740
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a7b20
mov byte [ebp - 0x1b31], al
movzx eax, byte [ebp - 0x1b31]
test eax, eax
je 0x4911a6
push 1
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b38], eax
mov eax, dword [ebp - 0x1b38]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00480d30
push 2
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b3c], eax
mov eax, dword [ebp - 0x1b3c]
push eax
lea ecx, [ebp - 0x88]
call fcn.00480d30
push 2
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b40], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x192c], esp
mov eax, dword [ebp - 0x1b40]
push eax
call fcn.00480c70
mov dword [ebp - 0x1b44], eax
lea ecx, [ebp - 0x1948]
push ecx
call fcn.0048e7b0
add esp, 0x20
mov dword [ebp - 0x1b48], eax
mov edx, dword [ebp - 0x1b48]
mov dword [ebp - 0x1b4c], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x1b4c]
push eax
lea ecx, [ebp - 0x1964]
push ecx
call fcn.0048ec30
add esp, 8
mov dword [ebp - 0x1b50], eax
mov edx, dword [ebp - 0x1b50]
mov dword [ebp - 0x1b54], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1b54]
push eax
lea ecx, [ebp - 0x50]
call fcn.00405f40
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1964]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1948]
call fcn.00480cf0
push 3
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a84b0
mov dword [ebp - 0x1b58], eax
mov eax, dword [ebp - 0x1b58]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00480d30
push 5
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a8300
mov dword [ebp - 0x1b5c], eax
cmp dword [ebp - 0x1b5c], 0
setne al
mov byte [ebp - 0xc5], al
push 4
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a8300
mov dword [ebp - 0x1b60], eax
cmp dword [ebp - 0x1b60], 0
setne al
mov byte [ebp - 0x15], al
push 7
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
call fcn.004a8390
mov dword [ebp - 0x1b68], eax
mov dword [ebp - 0x1b64], edx
mov eax, dword [ebp - 0x1b68]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x1b64]
mov dword [ebp - 0xec], ecx
movzx edx, byte [ebp - 0x15]
test edx, edx
jne 0x4908b6
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1b6c], eax
mov eax, dword [ebp - 0x1b6c]
mov dword [ebp - 0x196c], eax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x196c], 0
je 0x4907c1
sub esp, 0x1c
mov dword [ebp - 0x1b70], esp
mov dword [ebp - 0x1970], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1974], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00402b70
mov dword [ebp - 0x1b74], eax
mov eax, dword [ebp - 0x1b70]
push eax
mov ecx, dword [ebp - 0x1b30]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x4c]
call eax
mov dword [ebp - 0x1b78], eax
mov ecx, dword [ebp - 0x1b78]
mov dword [ebp - 0x1b7c], ecx
mov ecx, dword [ebp - 0x196c]
call fcn.004897d0
mov dword [ebp - 0x1b80], eax
mov edx, dword [ebp - 0x1b80]
mov dword [ebp - 0x1b84], edx
jmp 0x4907cb
mov dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x1b84]
mov dword [ebp - 0x1968], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ebp - 0x1968]
mov dword [ecx + 4], edx
push 0x4f3694
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x1b88], eax
lea ecx, [ebp - 0x1990]
push ecx
mov ecx, dword [ebp - 0x1b88]
call fcn.00402230
mov dword [ebp - 0x1b8c], eax
mov edx, dword [ebp - 0x1b8c]
mov dword [ebp - 0x1b90], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x1b90]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1990]
call fcn.00402bb0
mov ecx, dword [ebp - 0x1b30]
cmp dword [ecx + 4], 0
je 0x4908b1
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 4]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x1998]
mov dword [ebp - 0x1994], ecx
cmp dword [ebp - 0x1994], 0
je 0x49089a
push 1
mov ecx, dword [ebp - 0x1994]
call fcn.0049f490
mov dword [ebp - 0x1b94], eax
mov edx, dword [ebp - 0x1b94]
mov dword [ebp - 0x1b98], edx
jmp 0x4908a4
mov dword [ebp - 0x1b98], 0
mov eax, dword [ebp - 0x1b30]
mov dword [eax + 4], 0
jmp 0x490a4c
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1b9c], eax
mov ecx, dword [ebp - 0x1b9c]
mov dword [ebp - 0x19a0], ecx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x19a0], 0
je 0x49095c
sub esp, 0x1c
mov dword [ebp - 0x1ba0], esp
mov dword [ebp - 0x19a4], esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x19a8], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00402b70
mov dword [ebp - 0x1ba4], eax
mov eax, dword [ebp - 0x1ba0]
push eax
mov ecx, dword [ebp - 0x1b30]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x34]
call eax
mov dword [ebp - 0x1ba8], eax
mov ecx, dword [ebp - 0x1ba8]
mov dword [ebp - 0x1bac], ecx
mov ecx, dword [ebp - 0x19a0]
call fcn.004897d0
mov dword [ebp - 0x1bb0], eax
mov edx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x1bb4], edx
jmp 0x490966
mov dword [ebp - 0x1bb4], 0
mov eax, dword [ebp - 0x1bb4]
mov dword [ebp - 0x199c], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ebp - 0x199c]
mov dword [ecx + 4], edx
push 0x4f369c
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x1bb8], eax
lea ecx, [ebp - 0x19c4]
push ecx
mov ecx, dword [ebp - 0x1bb8]
call fcn.00402230
mov dword [ebp - 0x1bbc], eax
mov edx, dword [ebp - 0x1bbc]
mov dword [ebp - 0x1bc0], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1bc0]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x19c4]
call fcn.00402bb0
mov ecx, dword [ebp - 0x1b30]
cmp dword [ecx + 4], 0
je 0x490a4c
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 4]
mov dword [ebp - 0x19cc], eax
mov ecx, dword [ebp - 0x19cc]
mov dword [ebp - 0x19c8], ecx
cmp dword [ebp - 0x19c8], 0
je 0x490a35
push 1
mov ecx, dword [ebp - 0x19c8]
call fcn.0049f490
mov dword [ebp - 0x1bc4], eax
mov edx, dword [ebp - 0x1bc4]
mov dword [ebp - 0x1bc8], edx
jmp 0x490a3f
mov dword [ebp - 0x1bc8], 0
mov eax, dword [ebp - 0x1b30]
mov dword [eax + 4], 0
push 0x4f36a4
lea ecx, [ebp - 0x34]
call fcn.004a0130
mov dword [ebp - 0x1bcc], eax
cmp dword [ebp - 0x1bcc], 0
jne 0x490a76
mov byte [ebp - 4], 8
jmp 0x49052d
mov byte [ebp - 4], 0x10
movzx ecx, byte [ebp - 0x15]
test ecx, ecx
jne 0x4910a6
lea ecx, [ebp - 0x10c]
call fcn.00480c00
mov dword [ebp - 0x1bd0], eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x914], 0xffffffff
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x19e8]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1bd4], eax
mov edx, dword [ebp - 0x1bd4]
mov dword [ebp - 0x1bd8], edx
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x1bd8]
call fcn.00480e10
mov dword [ebp - 0x1bdc], eax
mov eax, dword [ebp - 0x1bdc]
push eax
push 0x4f36ac
lea ecx, [ebp - 0x1920]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x19e8]
call fcn.00480cf0
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1a04]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1be0], eax
mov edx, dword [ebp - 0x1be0]
mov dword [ebp - 0x1be4], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1be4]
call fcn.00480e10
mov dword [ebp - 0x1be8], eax
mov eax, dword [ebp - 0x1be8]
push eax
push str._s.newsoft
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a04]
call fcn.00480cf0
push 0
push 2
push 2
push 0
push 0
push 2
lea edx, [ebp - 0x1120]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 0xffffffff
jne 0x490bc3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10c]
call fcn.00480cf0
mov byte [ebp - 4], 9
jmp 0x490531
mov eax, dword [ebp - 0x914]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x918], 0
mov dword [ebp - 0x1a08], 0x12
mov edx, dword [ebp - 0x1a08]
push edx
call fcn.004c0518
add esp, 4
mov dword [ebp - 0x1bec], eax
mov eax, dword [ebp - 0x1bec]
mov dword [ebp - 0x1a0c], eax
cmp dword [ebp - 0x1a0c], 0
je 0x490c41
mov ecx, dword [ebp - 0x1a08]
push ecx
push 0
mov edx, dword [ebp - 0x1a0c]
push edx
call fcn.004bfe20
add esp, 0xc
mov eax, dword [ebp - 0x1a0c]
mov dword [ebp - 0x1bf0], eax
jmp 0x490c4b
mov dword [ebp - 0x1bf0], 0
mov ecx, dword [ebp - 0x1bf0]
mov dword [ebp - 0x91c], ecx
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1a2c]
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1bf4], eax
mov edx, dword [ebp - 0x1bf4]
mov dword [ebp - 0x1bf8], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1bf8]
call fcn.00480e10
mov dword [ebp - 0x1bfc], eax
mov eax, dword [ebp - 0x1bfc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x1a10], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a2c]
call fcn.00480cf0
cmp dword [ebp - 0x1a10], 0
je 0x490db7
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x1a48]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c00], eax
mov ecx, dword [ebp - 0x1c00]
mov dword [ebp - 0x1c04], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1c04]
call fcn.00480e10
mov dword [ebp - 0x1c08], eax
mov edx, dword [ebp - 0x1c08]
push edx
push 0x4f36cc
lea eax, [ebp - 0x910]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a48]
call fcn.00480cf0
lea ecx, [ebp - 0x918]
push ecx
lea edx, [ebp - 0x910]
push edx
call fcn.0048d6c0
add esp, 8
mov eax, dword [ebp - 0x918]
push eax
push 0x4f36d4
mov ecx, dword [ebp - 0x91c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov edx, dword [ebp - 0x91c]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00480d30
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call fcn.004a3ac0
add esp, 8
mov byte [ebp - 0x1c09], al
movzx edx, byte [ebp - 0x1c09]
test edx, edx
je 0x490db7
lea eax, [ebp - 0x1120]
push eax
lea ecx, [ebp - 0x1920]
push ecx
call fcn.004c2b74
add esp, 8
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x1a4c], edx
mov eax, dword [ebp - 0x1a4c]
push eax
call fcn.004c0415
add esp, 4
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1a6c]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c10], eax
mov ecx, dword [ebp - 0x1c10]
mov dword [ebp - 0x1c14], ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1c14]
call fcn.00480e10
mov dword [ebp - 0x1c18], eax
mov edx, dword [ebp - 0x1c18]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x1a4d], al
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a6c]
call fcn.00480cf0
movzx eax, byte [ebp - 0x1a4d]
test eax, eax
je 0x491095
push 1
mov ecx, dword [ebp - 0x1b30]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov eax, dword [edx + 0x84]
call eax
push 0xa0
call fcn.004bff01
add esp, 4
mov dword [ebp - 0x1c1c], eax
mov ecx, dword [ebp - 0x1c1c]
mov dword [ebp - 0x1a74], ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1a74], 0
je 0x490f64
sub esp, 0x1c
mov dword [ebp - 0x1c20], esp
mov dword [ebp - 0x1a78], esp
push 1
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp - 0xf0]
push eax
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a7c], esp
lea edx, [ebp - 0xc4]
push edx
lea eax, [ebp - 0xe4]
push eax
push ecx
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c24], eax
mov ecx, dword [ebp - 0x1c24]
mov dword [ebp - 0x1c28], ecx
mov byte [ebp - 4], 0x18
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a80], esp
lea edx, [ebp - 0x50]
push edx
call fcn.00402b70
mov dword [ebp - 0x1c2c], eax
mov eax, dword [ebp - 0x1c20]
push eax
mov ecx, dword [ebp - 0x1b30]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 0x10]
mov edx, dword [eax]
mov byte [ebp - 4], 0x17
mov eax, dword [edx + 0x74]
call eax
mov dword [ebp - 0x1c30], eax
mov ecx, dword [ebp - 0x1c30]
mov dword [ebp - 0x1c34], ecx
mov ecx, dword [ebp - 0x1a74]
call fcn.004897d0
mov dword [ebp - 0x1c38], eax
mov edx, dword [ebp - 0x1c38]
mov dword [ebp - 0x1c3c], edx
jmp 0x490f6e
mov dword [ebp - 0x1c3c], 0
mov eax, dword [ebp - 0x1c3c]
mov dword [ebp - 0x1a70], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ebp - 0x1a70]
mov dword [ecx + 4], edx
push 0x4f36dc
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax + 4]
call fcn.004897b0
mov dword [ebp - 0x1c40], eax
lea ecx, [ebp - 0x1a9c]
push ecx
mov ecx, dword [ebp - 0x1c40]
call fcn.00402230
mov dword [ebp - 0x1c44], eax
mov edx, dword [ebp - 0x1c44]
mov dword [ebp - 0x1c48], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x1c48]
push eax
lea ecx, [ebp - 0x34]
call fcn.00405f40
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1a9c]
call fcn.00402bb0
mov ecx, dword [ebp - 0x1b30]
cmp dword [ecx + 4], 0
je 0x491054
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx + 4]
mov dword [ebp - 0x1aa4], eax
mov ecx, dword [ebp - 0x1aa4]
mov dword [ebp - 0x1aa0], ecx
cmp dword [ebp - 0x1aa0], 0
je 0x49103d
push 1
mov ecx, dword [ebp - 0x1aa0]
call fcn.0049f490
mov dword [ebp - 0x1c4c], eax
mov edx, dword [ebp - 0x1c4c]
mov dword [ebp - 0x1c50], edx
jmp 0x491047
mov dword [ebp - 0x1c50], 0
mov eax, dword [ebp - 0x1b30]
mov dword [eax + 4], 0
push 0x4f36e4
lea ecx, [ebp - 0x34]
call fcn.004a0130
mov dword [ebp - 0x1c54], eax
cmp dword [ebp - 0x1c54], 0
jne 0x49107f
lea ecx, [ebp - 0x1120]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x491095
lea edx, [ebp - 0x1920]
push edx
lea eax, [ebp - 0x1120]
push eax
call fcn.004c2b74
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10c]
call fcn.00480cf0
jmp 0x491108
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1ac0]
push eax
call fcn.004a3a30
add esp, 0xc
mov dword [ebp - 0x1c58], eax
mov ecx, dword [ebp - 0x1c58]
mov dword [ebp - 0x1c5c], ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1c5c]
call fcn.00480e10
mov dword [ebp - 0x1c60], eax
push 0
mov edx, dword [ebp - 0x1c60]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1ac0]
call fcn.00480cf0
jmp 0x491193
mov dword [ebp - 4], 9
jmp 0x4911a1
jmp 0x490531
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 4]
call fcn.004a7d50
push str.update_after_restore
lea ecx, [ebp - 0x1af0]
call fcn.00402ae0
mov dword [ebp - 0x1c6c], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1ad0], esp
push str.https:__secure.newsoftwares.net_php_database_newsoftwares_onlinebackup_update_after_restore.php
call fcn.00480c70
mov dword [ebp - 0x1c70], eax
mov edx, dword [ebp - 0x1c70]
mov dword [ebp - 0x1c74], edx
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1af0]
push eax
lea edx, [ebp - 0x1b0c]
mov ecx, dword [ebp - 0x1b30]
call fcn.0049f4e0
mov dword [ebp - 0x1c78], eax
mov ecx, dword [ebp - 0x1c78]
mov dword [ebp - 0x1c7c], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x1c7c]
push edx
lea eax, [ebp - 0x1b28]
push eax
call fcn.0048e540
add esp, 8
mov dword [ebp - 0x1c80], eax
mov ecx, dword [ebp - 0x1c80]
mov dword [ebp - 0x1c84], ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x1c84]
call fcn.00480e10
mov dword [ebp - 0x1c88], eax
mov edx, dword [ebp - 0x1b30]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1b30]
add ecx, dword [eax + 4]
call fcn.00480e10
mov dword [ebp - 0x1c8c], eax
mov ecx, dword [ebp - 0x1b30]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x1b30]
lea ecx, [ecx + eax + 0x1c]
call fcn.00480e10
mov dword [ebp - 0x1c90], eax
mov edx, dword [ebp - 0x1c88]
push edx
mov eax, dword [ebp - 0x1c8c]
push eax
mov ecx, dword [ebp - 0x1c90]
push ecx
push 0x4f37e8
mov edx, dword [ebp - 0x1b30]
push edx
call fcn.0049f6f0
add esp, 0x14
mov dword [ebp - 0x1c94], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1ad4], esp
mov eax, dword [ebp - 0x1c94]
push eax
call fcn.00480cb0
mov dword [ebp - 0x1c98], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x1b30]
call fcn.00496940
mov byte [ebp - 0x1c99], al
movzx ecx, byte [ebp - 0x1c99]
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x1ac9], cl
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1b28]
call fcn.00480cf0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1b0c]
call fcn.00402bb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1af0]
call fcn.00402bb0
jmp 0x491374
mov dword [ebp - 4], 8
mov byte [ebp - 0x1b29], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa8]
call fcn.00480cf0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe4]
call fcn.00480cf0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00480cf0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x50]
call fcn.00402bb0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00480cf0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc4]
call fcn.00480cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.00402bb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.00487c30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call fcn.00480cf0
mov al, byte [ebp - 0x1b29]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004be1d6
mov esp, ebp
pop ebp
ret 0x2c