Function at 0x407b95
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1474
call fcn.0042d380
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor esi, esi
mov edi, ecx
cmp ebx, esi
mov dword [ebp - 4], edi
jne 0x407bc7
cmp dword [edi + 0x434], esi
je 0x407dad
push esi
push esi
push esi
jmp 0x407dbe
or dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
mov ecx, edi
mov dword [ebp - 8], esi
mov dword [ebp - 0xc], esi
call fcn.00407ef6
test eax, eax
jne 0x407bf3
push esi
push ebx
mov ecx, edi
call fcn.004077ae
jmp 0x407d74
push 1
push ebx
mov ecx, edi
call fcn.004077ae
lea eax, [ebp - 0xc]
push eax
push str.enable
push str.SyncMgr
push ebx
call fcn.0041e678
add esp, 0x10
xor eax, eax
cmp dword [ebp - 0xc], esi
setne al
cmp dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
je 0x407c2f
push dword [ebp - 8]
mov ecx, edi
push ebx
call fcn.00408c8e
cmp dword [ebp - 8], esi
je 0x407dad
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x42a]
mov word [ebp - 0x42c], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 1
mov ebx, 0x104
push esi
lea eax, [ebp - 0x42c]
push ebx
push eax
push dword [ebp + 8]
push esi
call fcn.0041f243
lea eax, [ebp - 0x42c]
push eax
call fcn.0041f36c
mov edi, eax
add esp, 0x1c
cmp edi, dword [ebp - 0x10]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], esi
je 0x407d7b
mov ecx, 0x411
xor eax, eax
lea edi, [ebp - 0x1472]
mov word [ebp - 0x1474], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x222]
mov word [ebp - 0x224], si
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x224]
push ebx
push eax
push 3
call fcn.0041dc67
push esi
call dword [sym.imp.MSVCRT.dll__wtmpnam]
add esp, 0x10
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x1474]
push dword [ebp + 8]
push str.http:__user.toolbar.soso.com_tbi.q_cmdDNuin_lutm_ld
push 0x823
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov ecx, dword [ebp - 4]
add esp, 0x14
push dword [ebp + 8]
push str.http:__user.toolbar.soso.com
call fcn.0040839e
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x1474]
push eax
call fcn.00408217
mov edi, eax
cmp edi, esi
jne 0x407d52
lea eax, [ebp - 0x42c]
push esi
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x407d70
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp edi, esi
je 0x407d78
xor eax, eax
jmp 0x407dc3
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
push 0x457a18
push str.SyncMgr
push ebx
mov dword [ebp - 0x1c], esi
call fcn.0041e678
add esp, 0x10
cmp dword [ebp - 0x18], esi
jne 0x407db2
cmp edi, dword [ebp - 0x1c]
jne 0x407db2
mov eax, dword [ebp - 4]
cmp dword [eax + 0x434], ebx
jne 0x407db2
push 1
pop eax
jmp 0x407dc3
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x42c]
push edi
push eax
push ebx
call fcn.00408c57
pop edi
pop esi
pop ebx
leave
ret 4