Function at 0x6f7360
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x88e336
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x45c
push ebx
push ebp
push esi
mov esi, ecx
mov ecx, dword [esp + 0x47c]
push edi
call fcn.00617be0
mov esi, dword [esi]
xor ebx, ebx
lea edi, [esi + 0x20]
mov dword [esi + 0x1c], ebx
mov ecx, edi
mov dword [esp + 0x38], edi
call fcn.00612440
mov eax, dword [esi + 0x14]
lea ebp, [esi + 0x14]
cmp dword [eax - 8], ebx
je 0x6f7dce
mov ecx, dword [esi + 0x18]
cmp dword [ecx - 8], ebx
je 0x6f7dce
mov edx, dword [esp + 0x47c]
lea ecx, [esp + 0x18]
push edx
call fcn.00617650
mov eax, dword [0x8ab268]
mov dword [esp + 0x474], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], eax
push 0x5c
lea ecx, [esp + 0x1c]
mov byte [esp + 0x478], 2
call fcn.006190d0
cmp eax, ebx
jge 0x6f7441
or ebp, 0xffffffff
push str.cannot_get_file_name_
mov ecx, edi
mov dword [esi + 0x1c], ebp
call fcn.006129f0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x474], 1
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], ebp
call fcn.00617ec0
jmp 0x6f7de1
inc eax
lea ecx, [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0061a220
lea ecx, [esp + 0x24]
push 0xfde9
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0x47c], 3
call fcn.0061c5b0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x478], 4
call fcn.006128d0
lea ecx, [esp + 0x24]
mov byte [esp + 0x474], 3
call fcn.00612730
mov ecx, dword [esp + 0x18]
xor edx, edx
mov dword [esp + 0x4c], edx
push 0xffffffffffffffff
lea eax, [esp + 0x4c]
push 0x10
mov dword [esp + 0x58], edx
push eax
push ecx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x64], edx
call fcn.006720b0
add esp, 0x10
test eax, eax
jne 0x6f74e3
or ebp, 0xffffffff
push str.cannot_get_file_md5_
mov ecx, edi
mov dword [esi + 0x1c], ebp
call fcn.006129f0
lea ecx, [esp + 0x20]
mov byte [esp + 0x474], 2
call fcn.00617ec0
jmp 0x6f740b
mov edx, dword [esp + 0x57]
mov eax, dword [esp + 0x56]
mov ecx, dword [esp + 0x55]
and edx, 0xff
push edx
mov edx, dword [esp + 0x58]
and eax, 0xff
and ecx, 0xff
push eax
mov eax, dword [esp + 0x5b]
and edx, 0xff
push ecx
mov ecx, dword [esp + 0x5e]
push edx
mov edx, dword [esp + 0x61]
and eax, 0xff
and ecx, 0xff
push eax
mov eax, dword [esp + 0x64]
and edx, 0xff
push ecx
mov ecx, dword [esp + 0x66]
push edx
mov edx, dword [esp + 0x68]
and eax, 0xff
and ecx, 0xffff
push eax
mov eax, dword [esp + 0x68]
and edx, 0xffff
push ecx
push edx
push eax
lea ecx, [esp + 0x48]
push str._08X__04X__04X__02X_02X__02X_02X_02X_02X_02X_02X
push ecx
call fcn.006156e0
add esp, 0x34
lea ecx, [esp + 0x20]
mov byte [esp + 0x474], 2
call fcn.00617ec0
mov edx, dword [0x8ab268]
xor edi, edi
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x18]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.loginID_schecksum_s
push edx
mov byte [esp + 0x484], 5
call fcn.006156e0
add esp, 0x10
mov ecx, esi
call fcn.00738150
push ebx
push 1
mov ecx, esi
call fcn.00738370
push ebx
mov ecx, esi
call fcn.00738270
push 0x1e
mov ecx, esi
call fcn.007382b0
push str.libcurl_agent_1.0
mov ecx, esi
call fcn.007382e0
mov eax, dword [ebp]
mov ecx, esi
push eax
call fcn.00738310
push ebx
push ebx
push ebx
push 1
mov ecx, esi
call fcn.007387a0
push ecx
mov ecx, esp
lea eax, [esp + 0x18]
mov dword [esp + 0x34], esp
push eax
call fcn.00611c90
push str._oapprbk_a_checkFile
lea ecx, [esp + 0x2c]
push ebp
push ecx
mov byte [esp + 0x484], 6
call fcn.00612e70
mov ecx, eax
mov byte [esp + 0x478], 8
call fcn.006f8200
push eax
mov ecx, esi
call fcn.007385d0
cmp eax, ebx
lea ecx, [esp + 0x24]
sete byte [esp + 0x13]
mov byte [esp + 0x474], 5
call fcn.00612730
cmp byte [esp + 0x13], bl
je 0x6f76ab
mov ecx, esi
mov dword [esi + 0x1c], 0xffffff9c
call fcn.007384a0
mov ecx, dword [esp + 0x38]
push eax
call fcn.006129f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 2
call fcn.00612730
lea ecx, [esp + 0x1c]
mov byte [esp + 0x474], 1
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], 0xffffffff
call fcn.00617ec0
jmp 0x6f7de1
lea edx, [esp + 0x20]
mov ecx, esi
push edx
call fcn.007388f0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x474], 9
push eax
call fcn.00736860
add esp, 4
cmp eax, ebx
mov dword [esp + 0x34], eax
je 0x6f76f3
push str.error
push eax
call fcn.00737960
add esp, 8
cmp eax, ebx
jne 0x6f772e
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00736720
add esp, 4
lea ecx, [esp + 0x20]
or edi, 0xffffffff
push ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x1c], edi
call fcn.006128d0
lea ecx, [esp + 0x20]
mov byte [esp + 0x474], 5
call fcn.00612730
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 2
call fcn.00612730
jmp 0x6f7ccc
mov eax, dword [eax + 0x14]
cmp eax, ebx
mov dword [esi + 0x1c], eax
jne 0x6f7751
mov edx, dword [esp + 0x34]
push str.exist
push edx
call fcn.00737960
add esp, 8
cmp eax, ebx
je 0x6f7751
mov edi, dword [eax + 0x14]
mov eax, dword [esp + 0x34]
push eax
call fcn.00736720
mov eax, dword [esi + 0x1c]
add esp, 4
cmp eax, ebx
mov byte [esp + 0x474], 5
lea ecx, [esp + 0x20]
je 0x6f778c
call fcn.00612730
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 2
call fcn.00612730
jmp 0x6f7bc6
call fcn.00612730
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 2
call fcn.00612730
lea ecx, [esp + 0x40]
call fcn.00738930
mov edx, dword [0x8ab268]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], edx
cmp edi, ebx
mov byte [esp + 0x474], 0xb
jne 0x6f7a7d
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
push eax
call fcn.00612ac0
mov ecx, dword [esp + 0x2c]
push ecx
lea ecx, [esp + 0x28]
call fcn.00617540
mov eax, dword [eax]
mov edx, dword [esp + 0x18]
push eax
push edx
call fcn.005fd3f1
add esp, 8
cmp eax, ebx
lea ecx, [esp + 0x24]
setne byte [esp + 0x13]
call fcn.00617ec0
cmp byte [esp + 0x13], bl
je 0x6f7a65
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x5e]
mov word [esp + 0x5c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x5c]
mov dword [esp + 0x20], 1
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x266]
mov word [esp + 0x264], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x264]
push 0x104
lea edx, [esp + 0x60]
push ecx
push edx
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea eax, [esp + 0x264]
lea ecx, [esp + 0x14]
push eax
call fcn.00617650
push str.curl_
lea ecx, [esp + 0x18]
mov byte [esp + 0x478], 0xc
call fcn.00618b00
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
call fcn.00617540
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x478], 0xd
call fcn.00618b60
lea ecx, [esp + 0x24]
mov byte [esp + 0x474], 0xc
call fcn.00617ec0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x30]
push edx
call fcn.00611f20
mov eax, dword [eax]
lea ecx, [esp + 0x24]
push eax
mov byte [esp + 0x478], 0xe
call fcn.00617540
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x18]
push eax
call fcn.005fd3f1
add esp, 8
cmp eax, ebx
lea ecx, [esp + 0x24]
setne byte [esp + 0x13]
call fcn.00617ec0
lea ecx, [esp + 0x30]
mov byte [esp + 0x474], 0xc
call fcn.00612730
cmp byte [esp + 0x13], bl
je 0x6f795a
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x34]
call fcn.00617540
mov edx, dword [eax]
lea eax, [esp + 0x14]
push edx
push str.C:curl__s
push eax
mov byte [esp + 0x480], 0xf
call fcn.0061aed0
add esp, 0xc
lea ecx, [esp + 0x30]
mov byte [esp + 0x474], 0xc
call fcn.00617ec0
push 0x92e9cc
mov dword [esp + 0x28], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
cmp edi, ebx
je 0x6f79a9
push str.CreateSymbolicLinkW
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x6f7998
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ebx
push ecx
push edx
call eax
test eax, eax
je 0x6f7998
mov dword [esp + 0x24], 1
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [esp + 0x24], ebx
jne 0x6f7a46
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x6f7a46
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x38]
push str.failed_copyfile_to_temp_path
mov dword [esi + 0x1c], eax
call fcn.006129f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 0xb
call fcn.00617ec0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x474], 0xa
call fcn.00612730
lea ecx, [esp + 0x40]
mov byte [esp + 0x474], 2
call fcn.00738940
lea ecx, [esp + 0x1c]
mov byte [esp + 0x474], 1
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], 0xffffffff
call fcn.00617ec0
jmp 0x6f7de1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x2c]
push edx
call fcn.00612ac0
lea ecx, [esp + 0x14]
mov byte [esp + 0x474], 0xb
call fcn.00617ec0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
push str.file
lea ecx, [esp + 0x4c]
call fcn.00738950
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x40]
push eax
push 0x998f7c
call fcn.00738980
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x40]
push edx
push str.checksum
call fcn.00738980
push str.send
push str.submit
lea ecx, [esp + 0x48]
call fcn.00738980
mov ecx, esi
call fcn.00738150
push ebx
push 1
mov ecx, esi
call fcn.00738370
push ebx
mov ecx, esi
call fcn.00738270
push str.libcurl_agent_1.0
mov ecx, esi
call fcn.007382e0
mov eax, dword [ebp]
mov ecx, esi
push eax
call fcn.00738310
push 0x9bec2c
push str.Expect
mov ecx, esi
call fcn.007383e0
mov eax, dword [esp + 0x488]
mov ecx, dword [esp + 0x484]
push eax
push ecx
mov ecx, esi
call fcn.00738580
push ebx
push ebx
push ebx
push 1
mov ecx, esi
call fcn.007387a0
push str._oapprbk_a_addFile
lea edx, [esp + 0x34]
push ebp
push edx
call fcn.00612e70
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x47c], 0x10
call fcn.007386f0
test eax, eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x474], 0xb
sete byte [esp + 0x13]
call fcn.00612730
mov al, byte [esp + 0x13]
cmp al, bl
mov eax, dword [esp + 0x20]
je 0x6f7c00
cmp eax, ebx
je 0x6f7b8c
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x30]
push edx
call fcn.00617540
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x30]
call fcn.00617ec0
mov ecx, esi
mov dword [esi + 0x1c], 0xffffff9c
call fcn.007384a0
mov ecx, dword [esp + 0x38]
push eax
call fcn.006129f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x474], 0xa
call fcn.00612730
lea ecx, [esp + 0x40]
mov byte [esp + 0x474], 2
call fcn.00738940
lea ecx, [esp + 0x1c]
mov byte [esp + 0x474], 1
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], 0xffffffff
call fcn.00617ec0
jmp 0x6f7de1
cmp eax, ebx
je 0x6f7c24
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x30]
push eax
call fcn.00617540
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x30]
call fcn.00617ec0
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.007388f0
mov edx, dword [0x8ab268]
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x34]
mov byte [esp + 0x474], 0x12
push eax
call fcn.00736860
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x6f7c74
push str.error
push edi
call fcn.00737960
add esp, 8
cmp eax, ebx
jne 0x6f7d02
push edi
call fcn.00736720
add esp, 4
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x34]
or edi, 0xffffffff
push edx
mov dword [esi + 0x1c], edi
call fcn.006128d0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x474], 0x11
call fcn.00612730
lea ecx, [esp + 0x34]
mov byte [esp + 0x474], 0xb
call fcn.00612730
lea ecx, [esp + 0x2c]
mov byte [esp + 0x474], 0xa
call fcn.00612730
lea ecx, [esp + 0x40]
mov byte [esp + 0x474], 2
call fcn.00738940
lea ecx, [esp + 0x1c]
mov byte [esp + 0x474], 1
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], edi
call fcn.00617ec0
jmp 0x6f7de1
mov eax, dword [eax + 0x14]
cmp eax, ebx
mov dword [esi + 0x1c], eax
jne 0x6f7d2b
push str.node
push edi
call fcn.00737960
add esp, 8
cmp eax, ebx
je 0x6f7d2b
mov ecx, dword [eax + 0x10]
push ecx
lea ecx, [esp + 0x40]
call fcn.006129f0
push edi
call fcn.00736720
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x484]
add esp, 4
push eax
call fcn.00618270
lea ecx, [esp + 0x3c]
mov byte [esp + 0x474], 0x11
call fcn.00612730
lea ecx, [esp + 0x34]
mov byte [esp + 0x474], 0xb
call fcn.00612730
lea ecx, [esp + 0x2c]
mov byte [esp + 0x474], 0xa
call fcn.00612730
lea ecx, [esp + 0x40]
mov byte [esp + 0x474], 2
call fcn.00738940
mov eax, dword [esi + 0x1c]
xor ecx, ecx
cmp eax, ebx
mov byte [esp + 0x474], 1
sete cl
mov esi, ecx
lea ecx, [esp + 0x1c]
call fcn.00612730
lea ecx, [esp + 0x28]
mov byte [esp + 0x474], bl
call fcn.00612730
lea ecx, [esp + 0x18]
mov dword [esp + 0x474], 0xffffffff
call fcn.00617ec0
mov eax, esi
jmp 0x6f7de3
push str.no_login
mov ecx, edi
mov dword [esi + 0x1c], 0xfa1
call fcn.006129f0
xor eax, eax
mov ecx, dword [esp + 0x46c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x468
ret 0x10