Function at 0x4246fa
Capabilities:
Copy file
Delete file
Get file size
Move file
Write file on windows

Disassembly:
push 0x8c
mov eax, 0x426938
call fcn.0041094c
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov esi, ecx
lea ecx, [esi + 4]
xor ebx, ebx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x78], vtable.replay::scope.0
mov dword [ebp - 0x74], ecx
cmp ecx, ebx
je 0x42472f
mov eax, dword [ecx]
call dword [eax + 4]
push ebx
mov dword [ebp - 4], ebx
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, dword [esi + 0x28]
jb 0x424910
mov dword [ebp - 0x68], 1
cmp dword [esi + 0x2c], ebx
jbe 0x4248f5
cmp dword [esi + 0x24], 0x10
jb 0x424760
mov eax, dword [esi + 0x10]
jmp 0x424763
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x48]
push str._s.log.txt
push eax
call fcn.00425e93
add esp, 0xc
mov byte [ebp - 4], 1
cmp dword [esi + 0x24], 0x10
jb 0x424784
mov eax, dword [esi + 0x10]
jmp 0x424787
lea eax, [esi + 0x10]
push dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x2c]
push 0x42c740
push eax
call fcn.00425e93
add esp, 0x10
mov byte [ebp - 4], 2
cmp dword [esi + 0x2c], 1
jne 0x4247b9
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x4247b2
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0x14], 0x10
mov ecx, dword [ebp - 0x28]
jae 0x4247c5
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x4247d1
lea eax, [ebp - 0x44]
push 1
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x4248dc
mov eax, dword [esi + 0x2c]
cmp dword [ebp - 0x68], eax
jb 0x4248d7
xor edi, edi
inc edi
cmp eax, edi
jbe 0x4248b6
cmp dword [esi + 0x24], 0x10
jb 0x424805
mov eax, dword [esi + 0x10]
jmp 0x424808
lea eax, [esi + 0x10]
push edi
push eax
lea eax, [ebp - 0x98]
push 0x42c750
push eax
call fcn.00425e93
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00403554
push ebx
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040397b
cmp dword [esi + 0x24], 0x10
jb 0x42484b
mov eax, dword [esi + 0x10]
jmp 0x42484e
lea eax, [esi + 0x10]
inc edi
push edi
push eax
lea eax, [ebp - 0x98]
push str._s._i.log.txt
push eax
call fcn.00425e93
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.00403554
push ebx
push 1
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 2
call fcn.0040397b
cmp dword [ebp - 0x14], 0x10
mov ecx, dword [ebp - 0x28]
jae 0x424893
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x42489f
lea eax, [ebp - 0x44]
push 1
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
je 0x4248b6
cmp edi, dword [esi + 0x2c]
jb 0x4247fa
mov edi, dword [ebp - 0x6c]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040397b
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.0040397b
jmp 0x424755
inc dword [ebp - 0x68]
jmp 0x4248b9
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040397b
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.0040397b
push ebx
push ebx
push ebx
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push esi
call fcn.00424403
push 2
push ebx
push ebx
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [edi + 0x18], 0x10
jb 0x424928
mov ecx, dword [edi + 4]
jmp 0x42492b
lea ecx, [edi + 4]
mov eax, dword [ebp - 0x70]
cmp dword [eax + 0x18], 0x10
jb 0x424939
mov eax, dword [eax + 4]
jmp 0x42493c
add eax, 4
push ecx
push eax
lea eax, [ebp - 0x64]
push str._s_s_r_n
push eax
call fcn.00425e93
mov eax, dword [ebp - 0x60]
add esp, 0x10
cmp dword [ebp - 0x4c], 0x10
jae 0x42495b
lea eax, [ebp - 0x60]
push ebx
lea ecx, [ebp - 0x7c]
push ecx
push dword [ebp - 0x50]
push eax
push dword [esi + 0x30]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.0040397b
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x74]
cmp ecx, ebx
je 0x424988
mov eax, dword [ecx]
call dword [eax + 0xc]
call fcn.004109cf
ret 0xc