Function at 0x4ce0a5
Capabilities:
Check if file exists
Delete file
Get common file path
Move file

Disassembly:
push 0x4d8
mov eax, 0x54536d
call fcn.00506b61
push 0x42
pop ecx
mov esi, str.qG7nDW3II6UAFjDcxpltUAdJS8z6PG6ozwa0Qvdhokf6KaeIAH6SPQgOtyYnasjKa4dGbOKPtjoQKwamwj1dHV6AVR7BHMvrNugtvd4MSDoJSFVumLjKbDoqvlLfZepIDEOfkoml2hNVkYAY5IpBAfwQoPIt7BXm7qckTUZ4SqrMBgmUBOpnzcb4sSXy3ygr0dhd407j7tcqgK0bj9K6WfEQ4yc3ooZOj9zSpHRxCn4RjloTa7B6Y79vZFiHN3nDukB7uVsh9V
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x324]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
push 0x48
pop ecx
mov dword [ebp - 0x4e4], eax
movsw word es:[edi], word [esi]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], eax
movsb byte es:[edi], byte [esi]
mov esi, str.kZD1aJeebeK1SlyWCrzd8OHqj2ybSsBMnNHwZ5tobqRBXxMEsm9tekaSSCLE75W4eI7hG8KcTIrAKQYHMv0mDMRP4TgKrBQywzmJDb7IC627evXYS7i1yu83Hs2AWCvybWYTzJbThttGPJIlicpibxm43h0nFRszlbfIrr6NCKJG1SVTEHrKydvzChBUFJheY0pdxfseOXRSoduuaKoq6zy2yxAhV6IrWACOcuycthIsSb1i5DqwblZEVHxnJ3iMSdt2Jt5FtZUNS2wtvkstng7lF7qROpNP
lea edi, [ebp - 0x448]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x478]
lea eax, [ebp - 0x324]
push eax
call fcn.00405820
lea eax, [ebp - 0x478]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00407e30
push 0
push 1
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 0
call fcn.0046d37e
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x478]
call fcn.00405820
lea eax, [ebp - 0x478]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00407e30
push 0
push 1
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 0
call fcn.0046d37e
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4ce482
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call edi
test eax, eax
jne 0x4ce482
push 0x208
xor esi, esi
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004e37a0
add esp, 0xc
mov dword [ebp - 0x47c], 7
xor eax, eax
mov dword [ebp - 0x480], esi
lea ecx, [ebp - 0x490]
mov word [ebp - 0x490], ax
push esi
push 0x63d8a0
call fcn.00402650
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 3
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x4d8]
push ebx
push eax
call fcn.004cff6b
lea eax, [ebp - 0x4a8]
mov byte [ebp - 4], 4
push ebx
push eax
call fcn.004d0423
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x4c0]
push eax
call fcn.004d0423
lea eax, [ebp - 0x4a8]
mov byte [ebp - 4], 6
push eax
call fcn.004cd323
lea eax, [ebp - 0x4c0]
push eax
call fcn.004cd323
add esp, 0x20
lea eax, [ebp - 0x4a8]
cmp dword [ebp - 0x494], 8
lea ecx, [ebp - 0x4c0]
cmovae eax, dword [ebp - 0x4a8]
push dword [ebp - 0x498]
push eax
push dword [ebp - 0x4b0]
push esi
call fcn.004169a0
test eax, eax
jne 0x4ce293
cmp word [ebp - 0x218], ax
jne 0x4ce271
mov eax, esi
jmp 0x4ce27e
lea eax, [ebp - 0x218]
push eax
call fcn.004f3a59
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x490]
call fcn.00402650
jmp 0x4ce2bc
lea eax, [ebp - 0x478]
push ebx
push eax
call fcn.004d027b
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x490]
call fcn.00404010
push esi
push 1
lea ecx, [ebp - 0x478]
call fcn.00402590
xor esi, esi
and dword [ebp - 0x450], 0
lea ecx, [ebp - 0x460]
xor eax, eax
mov dword [ebp - 0x44c], 7
push eax
push 0x63d8a0
mov word [ebp - 0x460], ax
call fcn.00402650
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x490]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x460]
call fcn.004028b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x460]
call fcn.004043c0
push str..del
call fcn.004f3a59
pop ecx
push eax
push str..del
lea ecx, [ebp - 0x460]
call fcn.00404290
test esi, esi
jle 0x4ce374
mov eax, esi
cdq
push edx
push eax
lea eax, [ebp - 0x478]
push eax
call fcn.004c0aec
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 8
call fcn.004043c0
push 0
push 1
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 7
call fcn.00402590
cmp dword [ebp - 0x44c], 8
lea eax, [ebp - 0x460]
cmovae eax, dword [ebp - 0x460]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4ce3cf
cmp dword [ebp - 0x44c], 8
lea eax, [ebp - 0x460]
cmovae eax, dword [ebp - 0x460]
push eax
call edi
test eax, eax
jne 0x4ce3cf
cmp esi, 0xa
jge 0x4ce43c
push eax
push 1
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 6
inc esi
call fcn.00402590
jmp 0x4ce2be
cmp dword [ebp - 0x44c], 8
lea eax, [ebp - 0x460]
cmovae eax, dword [ebp - 0x460]
push eax
push ebx
call fcn.004eb829
cmp dword [ebp - 0x44c], 8
lea eax, [ebp - 0x460]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x460]
pop ecx
pop ecx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4ce42e
cmp dword [ebp - 0x44c], 8
lea eax, [ebp - 0x460]
push 5
cmovae eax, dword [ebp - 0x460]
push 0
push eax
call esi
push ebx
call edi
test eax, eax
je 0x4ce43c
push 5
push 0
push ebx
call esi
xor ebx, ebx
lea ecx, [ebp - 0x460]
xor esi, esi
push ebx
inc esi
push esi
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4c0]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4a8]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x4d8]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x490]
call fcn.00402590
lea ecx, [ebp - 0x4e4]
call fcn.0046d3d0
call fcn.00506b0b
ret