Function at 0x4e9d70
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10e8
call fcn.0059fbd0
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x10]
mov ecx, dword [esi]
push edi
lea eax, [ebp - 0xa2c]
call fcn.004016d4
mov ecx, dword [esi]
lea eax, [ebp - 0x20c]
call fcn.0040171e
lea eax, [ebp - 0x20c]
push eax
push 0x5f3c40
mov esi, 0x104
lea edi, [ebp - 0xc34]
call fcn.004a9039
mov eax, dword [ebx]
pop ecx
pop ecx
push 0
mov ecx, edi
push ecx
mov ecx, ebx
call dword [eax + 0x20]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
test al, al
je 0x4e9de2
mov eax, dword [ebp + 8]
mov dword [eax], 1
jmp 0x4ea012
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov edi, esi
push edi
lea esi, [ebp - 0x414]
call fcn.004a8ff7
lea eax, [ebp - 0x20c]
push str..aac
push eax
mov byte [ebp + 0xf], 0
call fcn.005a6122
test eax, eax
pop ecx
pop ecx
je 0x4e9e70
lea eax, [ebp - 0x20c]
push str..m4a
push eax
call fcn.005a6122
test eax, eax
pop ecx
pop ecx
je 0x4e9e70
lea eax, [ebp - 0x20c]
push str..m4b
push eax
call fcn.005a6122
test eax, eax
pop ecx
pop ecx
je 0x4e9e70
lea eax, [ebp - 0x20c]
push 0x5be6e4
push eax
call fcn.005a6122
test eax, eax
pop ecx
pop ecx
je 0x4e9e70
lea eax, [ebp - 0x20c]
push 0x5bcb90
push eax
call fcn.005a6122
test eax, eax
pop ecx
pop ecx
jne 0x4e9ef4
lea eax, [ebp - 0x414]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x4e9e79
sub eax, edx
sar eax, 1
cmp eax, 0xb8
jbe 0x4e9ef4
lea eax, [ebp - 0xa2c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0xa2c]
push eax
call fcn.004a21be
push 0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4e9ede
mov eax, dword [ebp + 8]
mov dword [eax], 2
jmp 0x4ea012
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x61c]
call fcn.00401016
mov byte [ebp + 0xf], 1
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
test al, al
jne 0x4e9dd4
mov eax, dword [ebp + 0x10]
push dword [eax + 4]
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x10e4]
push eax
push ebx
lea eax, [ebp - 0x824]
call fcn.004e9c95
test al, al
jne 0x4e9faa
cmp word [ebp - 0x824], 0
mov esi, edi
lea edi, [ebp - 0x61c]
je 0x4e9f59
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x5f3c58
call fcn.004a9039
add esp, 0xc
jmp 0x4e9f6c
lea eax, [ebp - 0x20c]
push eax
push 0x5f3d70
call fcn.004a9039
pop ecx
pop ecx
mov eax, dword [ebx]
lea ecx, [ebp - 0x61c]
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
cmp byte [ebp + 0xf], 0
je 0x4e9ed0
lea eax, [ebp - 0x414]
push eax
call fcn.00401b98
test al, al
je 0x4e9ed0
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4e9ed0
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
test al, al
jne 0x4e9dd4
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x28]
push 0xffffffffffffffff
lea eax, [ebp - 0x10e4]
push eax
push ebx
lea eax, [ebp + 0x10]
push eax
call fcn.004b3385
cmp byte [ebp + 0xf], 0
je 0x4e9ff5
lea eax, [ebp - 0x414]
push eax
call fcn.00401b98
test al, al
je 0x4e9ff5
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x2c]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
test al, al
mov eax, dword [ebp + 8]
jne 0x4e9dd7
mov ecx, dword [ebp + 0x10]
mov dword [eax], ecx
pop edi
pop esi
pop ebx
leave
ret 0xc