Function at 0x4dbc8b
Capabilities:
Check if file exists
Delete file
Get common file path
Move file

Disassembly:
push 0x4f4
mov eax, 0x5551c7
call fcn.00514880
push 0x4d
pop ecx
mov esi, str.dhjEPyhlv31zcRbN7wMY8hfS3jhnmZQLUEtiroxmKbc9pTf90wNjH6zPqelvv5PqfEZ6e9BzIR6E0Wow66uK2M0HRV8DLMJwNQG6YhCmV0n7jb2ERhgSskOxriIq8ITl1ImDmG0QGul9o4G7yWt65gd2uEfjuSliGXbWkkRyyUPoE5KdRP3w3DSJsBGfvjHcQkmJu8JYi9DkyBP1frPlQk4xVMymUBS0f8VLyDeujdTPrQnj1vZQIw5EXkAjdpi85dUwPEvI8ZRlU6AFPqpVipiXdbXTwgf3ECruzgqkuerccmSgFwuP
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x464]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
push 0x44
pop ecx
mov dword [ebp - 0x500], eax
movsb byte es:[edi], byte [esi]
mov esi, str.M0NNcsoaL6o2mvT4E21CYDvLnDweMOlcGfEjMI4dpqrctYtrm1zGGgHsk0JQx1zFhGZWovLDAx1BSKxBfoqDbTszuxjbc7rncops13hINmzsLJh7moniCNb2vMzAOQK8ILPtxnkvNeI3CZyuvUIhUIBUAjRpfdicuv1385d8GTLZ538P1gmINRNNSbSsYKo9nBivRl6LtGvM49CEdYPeYsbQoA5t4PLC3h5yENrK9aU3dM7IuiQZuMMFrMLo16DvP9dZe3F5LMEszaBT
mov dword [ebp - 0x4fc], eax
lea edi, [ebp - 0x32c]
mov dword [ebp - 0x4f8], eax
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x494]
lea eax, [ebp - 0x464]
push eax
call fcn.004057d0
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x500]
call fcn.00407f90
push 0
push 1
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 0
call fcn.00479e2e
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x494]
call fcn.004057d0
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x500]
call fcn.00407f90
push 0
push 1
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 0
call fcn.00479e2e
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push ebx
call edi
test eax, eax
je 0x4dc05c
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4dc05c
push 0x208
xor esi, esi
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004f14e0
add esp, 0xc
mov dword [ebp - 0x498], 7
xor eax, eax
mov dword [ebp - 0x49c], esi
lea ecx, [ebp - 0x4ac]
mov word [ebp - 0x4ac], ax
push esi
push 0x657910
call fcn.00402650
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 3
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x4f4]
push ebx
push eax
call fcn.004dca70
lea eax, [ebp - 0x4c4]
mov byte [ebp - 4], 4
push ebx
push eax
call fcn.004dcf27
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x4dc]
push eax
call fcn.004dcf27
lea eax, [ebp - 0x4c4]
mov byte [ebp - 4], 6
push eax
call fcn.004daf09
lea eax, [ebp - 0x4dc]
push eax
call fcn.004daf09
add esp, 0x20
lea eax, [ebp - 0x4c4]
cmp dword [ebp - 0x4b0], 8
lea ecx, [ebp - 0x4dc]
cmovae eax, dword [ebp - 0x4c4]
push dword [ebp - 0x4b4]
push eax
push dword [ebp - 0x4cc]
push esi
call fcn.00426720
test eax, eax
jne 0x4dbe77
cmp word [ebp - 0x218], ax
jne 0x4dbe55
mov eax, esi
jmp 0x4dbe62
lea eax, [ebp - 0x218]
push eax
call fcn.005017a9
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.00402650
jmp 0x4dbea0
lea eax, [ebp - 0x494]
push ebx
push eax
call fcn.004dcd7f
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4ac]
call fcn.00403fe0
push esi
push 1
lea ecx, [ebp - 0x494]
call fcn.00402590
xor esi, esi
and dword [ebp - 0x46c], 0
lea ecx, [ebp - 0x47c]
xor eax, eax
mov dword [ebp - 0x468], 7
push eax
push 0x657910
mov word [ebp - 0x47c], ax
call fcn.00402650
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x4ac]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x47c]
call fcn.00402880
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x47c]
call fcn.00404370
push str..del
call fcn.005017a9
pop ecx
push eax
push str..del
lea ecx, [ebp - 0x47c]
call fcn.00404240
test esi, esi
jle 0x4dbf58
mov eax, esi
cdq
push edx
push eax
lea eax, [ebp - 0x494]
push eax
call fcn.004ce690
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 8
call fcn.00404370
push 0
push 1
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 7
call fcn.00402590
cmp dword [ebp - 0x468], 8
lea eax, [ebp - 0x47c]
cmovae eax, dword [ebp - 0x47c]
push eax
call edi
test eax, eax
je 0x4dbfaf
cmp dword [ebp - 0x468], 8
lea eax, [ebp - 0x47c]
cmovae eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x4dbfaf
cmp esi, 0xa
jge 0x4dc016
push eax
push 1
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 6
inc esi
call fcn.00402590
jmp 0x4dbea2
cmp dword [ebp - 0x468], 8
lea eax, [ebp - 0x47c]
cmovae eax, dword [ebp - 0x47c]
push eax
push ebx
call fcn.004f964f
cmp dword [ebp - 0x468], 8
lea eax, [ebp - 0x47c]
pop ecx
cmovae eax, dword [ebp - 0x47c]
pop ecx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4dc008
cmp dword [ebp - 0x468], 8
lea eax, [ebp - 0x47c]
push 5
cmovae eax, dword [ebp - 0x47c]
push 0
push eax
call esi
push ebx
call edi
test eax, eax
je 0x4dc016
push 5
push 0
push ebx
call esi
xor ebx, ebx
lea ecx, [ebp - 0x47c]
xor esi, esi
push ebx
inc esi
push esi
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4dc]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4c4]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4f4]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4ac]
call fcn.00402590
lea ecx, [ebp - 0x500]
call fcn.00479e80
call fcn.0051483b
ret