Function at 0x4111fc
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x649ffc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, 0x6552bc
mov ebx, ecx
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x411227
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push edi
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov edi, 0x5fc50c
lea eax, [ebp - 0x2c]
push edi
push 0x14
push eax
call fcn.0041178f
add esp, 0x10
mov ecx, 0x5fc218
cmp byte [0x655b91], 0
mov eax, 0x5fc214
cmove eax, ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
push 0x5fc21c
lea eax, [ebp - 0x2c]
push eax
call esi
push 0x6552bc
push 0x654030
push str.pdtname
lea eax, [ebp - 0x2c]
push eax
call esi
push 0x6552bc
push 0x654e40
push str.proctype
lea eax, [ebp - 0x2c]
push eax
call esi
push 0x6552bc
push str.crash
push str.crashtype
lea eax, [ebp - 0x2c]
push eax
call esi
push dword [0x654ea4]
push edi
mov edi, 0x659bb0
push edi
call fcn.00411752
add esp, 0xc
lea eax, [ebp - 0x2c]
push 0x6552bc
push edi
push str.trycatchcnt
push eax
call esi
mov edi, 0x655bb0
mov ecx, 0x652654
push 0x2000
mov edx, edi
call fcn.00410997
mov dword [esp], 0x6552bc
lea eax, [ebp - 0x2c]
push edi
push str.cururl
push eax
call esi
mov edi, 0x6552bc
lea eax, [ebp - 0x2c]
push edi
push 0x6540e4
push 0x5fc2a0
push eax
call esi
push edi
push 0x654080
push str.pdtver
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x654db4
push 0x5fc2c0
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x655b40
push str.ExcptCode
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x6556cc
push str.module
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x655adc
push str.modulever
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x655b68
push str.offset
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x654ae4
push str.osver
lea eax, [ebp - 0x2c]
push eax
call esi
push edi
push 0x654cec
push str.iever
lea eax, [ebp - 0x2c]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x5fc328
push 0xffffffffffffffff
push 0x659bb0
call fcn.00411770
add esp, 0x10
lea eax, [ebp - 0x2c]
push edi
push 0x659bb0
push 0x5fc330
push eax
call esi
test ebx, ebx
je 0x41140d
cmp dword [ebx], 0
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
je 0x4113ef
push 0x6552bc
push 0x50
push dword [ebx]
lea eax, [ebp - 0x2c]
push str.ExceptionRecord
push eax
call edi
cmp dword [ebx + 4], 0
je 0x41140d
push 0x6552bc
push 0x2cc
push dword [ebx + 4]
lea eax, [ebp - 0x2c]
push str.ContextRecord
push eax
call edi
mov edi, 0x6550b4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call fcn.00410913
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x654eac
push str._s_u__d__s
push 0x104
mov ebx, 0x659bb0
push ebx
call fcn.00411770
add esp, 0x1c
push 0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
pop edi
test eax, eax
je 0x411464
push 0x6552bc
push ebx
push str.dump
lea eax, [ebp - 0x2c]
push eax
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0056e987
leave
ret