Function at 0x4ba7e6
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, 0x6c8744
push esi
mov dword [ebp - 0x30], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4ba816
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
push 9
mov word [ebp - 0x2c], ax
pop ecx
lea edi, [ebp - 0x2a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ebx, 0x65d0c0
push ebx
lea eax, [ebp - 0x2c]
push 0x14
push eax
call fcn.004bb1c1
add esp, 0x10
cmp byte [0x6c9019], 0
mov eax, 0x665524
jne 0x4ba854
mov eax, 0x665528
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push esi
push eax
push str.joinprivate
lea eax, [ebp - 0x2c]
push eax
call edi
cmp byte [0x6c901a], 0
mov eax, str.se6_bbs
jne 0x4ba87a
mov eax, 0x6c74b8
push esi
push eax
push str.pdtname
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c82c8
push str.proctype
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push str.crash
push str.crashtype
lea eax, [ebp - 0x2c]
push eax
call edi
push dword [0x6c832c]
push ebx
mov ebx, 0x6cd038
push ebx
call fcn.004bb1dd
add esp, 0xc
push esi
push ebx
push str.trycatchcnt
lea eax, [ebp - 0x2c]
push eax
call edi
push 0x2000
push 0x6c9038
push 0x6b73c4
call fcn.004b9eba
add esp, 0xc
push esi
push 0x6c9038
push str.cururl
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c756c
push str.cmdline
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c7508
push str.pdtver
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c823c
push 0x6667c4
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c8fc8
push str.ExcptCode
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c8b54
push str.module
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c8f64
push str.modulever
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c8ff0
push str.offset
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c7f6c
push str.osver
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6c8174
push str.iever
lea eax, [ebp - 0x2c]
push eax
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x66682c
push 0xffffffffffffffff
push ebx
call fcn.004190b1
add esp, 0x10
push esi
push ebx
push 0x666834
lea eax, [ebp - 0x2c]
push eax
call edi
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x4ba9f0
mov ecx, dword [eax]
test ecx, ecx
je 0x4ba9d3
push esi
push 0x50
push ecx
push str.ExceptionRecord
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
test eax, eax
je 0x4ba9f0
push esi
push 0x2cc
push eax
push str.ContextRecord
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
push 0x6c853c
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push 0x2710
push 1
call fcn.004c043f
pop ecx
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x6c8334
push str._s_u__d__s
push 0x104
push ebx
call fcn.004190b1
add esp, 0x1c
push 0
push ebx
push 0x6c853c
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x4baa49
push esi
push ebx
push str.dump
lea eax, [ebp - 0x2c]
push eax
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403fc1
leave
ret