Function at 0x42d3c0
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
mov eax, 0x1c54
call fcn.0051e250
push ebx
push ebp
push esi
push edi
xor ebx, ebx
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0xc06]
mov word [esp + 0xc04], bx
rep stosd dword es:[edi], eax
mov ecx, 0x571210
call fcn.0040c1b0
push eax
push str._sdata_tcdump_
lea eax, [esp + 0xc0c]
push 0x104
push eax
call fcn.0042dfb0
lea ecx, [esp + 0xc14]
push ecx
call fcn.0043fb20
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0xe26]
mov word [esp + 0xe24], bx
add esp, 0x14
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x540144
lea edx, [esp + 0xe18]
push 0x104
push edx
call fcn.0042dfb0
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x4a]
mov word [esp + 0x48], bx
rep stosd dword es:[edi], eax
lea eax, [esp + 0xe20]
lea ecx, [esp + 0xc14]
push eax
push ecx
push 0x53dc6c
lea edx, [esp + 0x54]
push 0x104
push edx
call fcn.0042dfb0
add esp, 0x24
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42d4a3
lea ecx, [esp + 0x38]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x246]
mov word [esp + 0x244], bx
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x53dd34
lea edx, [esp + 0x24c]
push 0x104
push edx
call fcn.0042dfb0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x579be4
push 0x540134
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x579dec
push 0x540124
push eax
call esi
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push 0x57a1fc
push 0x540114
push edx
call esi
mov ecx, 0x31
xor eax, eax
lea edi, [esp + 0x51a]
mov word [esp + 0x518], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x1c74]
lea ecx, [esp + 0x518]
push eax
push 0x53dd34
push 0x104
push ecx
call fcn.0042dfb0
add esp, 0x10
lea edx, [esp + 0x38]
lea eax, [esp + 0x518]
lea ecx, [esp + 0x244]
push edx
push eax
push 0x540100
push ecx
call esi
lea edx, [esp + 0x38]
push edx
call fcn.0049bdf0
push eax
lea eax, [esp + 0x24c]
push 0x5400f4
push eax
call esi
mov eax, dword [0x57be6c]
cmp eax, ebx
mov eax, 0x53dee4
jne 0x42d5b2
mov eax, 0x53decc
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push 0x5400dc
push edx
call esi
mov eax, dword [0x571254]
cmp eax, ebx
mov eax, 0x53decc
jne 0x42d5da
mov eax, 0x53dee4
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push 0x5400d0
push edx
call esi
cmp word [0x57188c], bx
jne 0x42d610
mov eax, dword [0x591228]
push 0x104
push 0x57188c
push 0x32
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push 0x57188c
push 0x5400bc
push edx
call esi
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x5400b0
push 0x5400a0
push ecx
call esi
mov eax, dword [esp + 0x1c6c]
cmp eax, ebx
mov eax, 0x53decc
jne 0x42d657
mov eax, 0x53dee4
lea edx, [esp + 0x38]
push edx
push eax
lea eax, [esp + 0x24c]
push 0x54008c
push eax
call esi
mov eax, dword [0x571ca4]
cmp eax, ebx
mov eax, 0x540088
jne 0x42d67f
mov eax, 0x53ed84
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push 0x54007c
push edx
call esi
mov eax, dword [0x571ca4]
cmp eax, ebx
mov eax, 0x540088
jne 0x42d6a7
mov eax, 0x53ed84
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push 0x540070
push edx
call esi
mov ecx, dword [esp + 0x1c70]
xor eax, eax
mov dword [esp + 0x26], eax
push ecx
mov dword [esp + 0x2e], eax
push 0x53dd34
mov dword [esp + 0x36], eax
lea edx, [esp + 0x2c]
mov dword [esp + 0x3a], eax
push 9
push edx
mov word [esp + 0x34], bx
mov word [esp + 0x46], ax
call fcn.0042dfb0
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x244]
push eax
push ecx
push 0x54005c
push edx
call esi
mov ecx, dword [0x57faa0]
xor eax, eax
mov dword [esp + 0x12], eax
push ecx
mov dword [esp + 0x1a], eax
push 0x53dd34
mov dword [esp + 0x22], eax
lea edx, [esp + 0x18]
mov dword [esp + 0x26], eax
push 9
push edx
mov word [esp + 0x20], bx
mov word [esp + 0x32], ax
call fcn.0042dfb0
add esp, 0x10
lea eax, [esp + 0x38]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x244]
push eax
push ecx
push 0x540054
push edx
call esi
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x571684
push 0x540044
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x579ff4
push 0x540034
push eax
call esi
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push 0x57a404
push 0x540024
push edx
call esi
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x57a60c
push 0x540010
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x57a814
push str.modu
push eax
call esi
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push 0x57aa1c
push str.modulever
push edx
call esi
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x184e]
mov word [esp + 0x184c], bx
rep stosd dword es:[edi], eax
lea eax, [esp + 0x38]
lea ecx, [esp + 0x184c]
push eax
push ecx
lea edx, [esp + 0x24c]
push str.InnerModule
push edx
call esi
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x57ac24
push str.ExcptCode
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x57ae2c
push str.offset
push eax
call esi
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push 0x57b034
push str.offsetnew
push edx
call esi
lea eax, [esp + 0x38]
lea ecx, [esp + 0x244]
push eax
push 0x57b444
push str.osver
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x57b64c
push str.iever
push eax
call esi
lea ecx, [esp + 0x38]
push ecx
call fcn.0049bfa0
push eax
lea edx, [esp + 0x24c]
push 0x53ff74
push edx
call esi
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x1436]
mov word [esp + 0x1434], bx
rep stosd dword es:[edi], eax
mov eax, dword [0x58bf88]
lea ecx, [esp + 0x1434]
push eax
push 0x53dd34
push 0x104
push ecx
call fcn.0042dfb0
add esp, 0x10
lea edx, [esp + 0x38]
lea eax, [esp + 0x1434]
lea ecx, [esp + 0x244]
push edx
push eax
push str.laid
push ecx
call esi
lea edx, [esp + 0x38]
lea eax, [esp + 0x244]
push edx
push 0x57b23c
push str.StackMd5
push eax
call esi
mov eax, dword [0x58b518]
cmp eax, ebx
mov eax, 0x53decc
jne 0x42d93e
mov eax, 0x53dee4
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push str.OS64
push edx
call esi
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x101e]
mov word [esp + 0x101c], bx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x1c68]
lea ecx, [esp + 0x101c]
push eax
push 0x53dd34
push 0x104
push ecx
call fcn.0042dfb0
add esp, 0x10
lea edx, [esp + 0x38]
lea eax, [esp + 0x101c]
lea ecx, [esp + 0x244]
push edx
push eax
push str.type
push ecx
call esi
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x7ee]
mov word [esp + 0x7ec], bx
rep stosd dword es:[edi], eax
mov ecx, 0x571210
call fcn.0040c1b0
push eax
push str._s360se.ini
lea edx, [esp + 0x7f4]
push 0x105
push edx
call fcn.0042dfb0
mov ebp, dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x1a6a]
add esp, 0x10
mov word [esp + 0x1a58], bx
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1a58]
push 0x104
lea ecx, [esp + 0x7f0]
push eax
push ecx
call ebp
lea edx, [esp + 0x38]
lea eax, [esp + 0x7ec]
push edx
push eax
lea ecx, [esp + 0x24c]
push str.seini
push ecx
call esi
lea edx, [esp + 0x1640]
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x1642]
push 0x104
mov word [esp + 0x1644], bx
push edx
push 0x57b854
rep stosd dword es:[edi], eax
call ebp
lea eax, [esp + 0x38]
lea ecx, [esp + 0x1640]
push eax
push ecx
lea edx, [esp + 0x24c]
push str.userdata
push edx
call esi
cmp word [0x57bc64], bx
je 0x42dc3c
push 0x57bc64
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42dc3c
mov eax, dword [esp + 0x1c78]
cmp eax, ebx
mov eax, 0x53decc
jne 0x42dab4
mov eax, 0x53dee4
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push str.UploadOld
push edx
call esi
mov eax, dword [esp + 0x1c7c]
cmp eax, ebx
mov eax, 0x53decc
jne 0x42dade
mov eax, 0x53dee4
lea ecx, [esp + 0x38]
lea edx, [esp + 0x244]
push ecx
push eax
push str.UploadNew
push edx
call esi
push 0x57bc64
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov ebp, eax
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x5e2]
mov word [esp + 0x5e0], bx
mov edx, 0x57bc64
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x5e0]
mov edi, 0x82
lea eax, [esp + 0x5e0]
sub edx, ecx
lea ecx, [edi + 0x7fffff7c]
test ecx, ecx
je 0x42db50
mov cx, word [edx + eax]
cmp cx, bx
je 0x42db50
mov word [eax], cx
add eax, 2
dec edi
jne 0x42db32
jmp 0x42db54
cmp edi, ebx
jne 0x42db57
sub eax, 2
lea edx, [esp + 0x5e0]
mov word [eax], bx
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov ecx, 0x31
xor eax, eax
lea edi, [esp + 0x452]
mov word [esp + 0x450], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x450]
push 0x63
push eax
push ebx
call fcn.0042de60
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0xa06]
mov word [esp + 0xa04], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x45c]
push ebp
lea edx, [esp + 0x5f0]
push ecx
push edx
push str._s_s__s
lea eax, [esp + 0xa14]
push 0x104
push eax
call fcn.0042e020
add esp, 0x24
lea ecx, [esp + 0x9f8]
push ebx
push ecx
push 0x57bc64
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x42dc3c
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x122a]
mov word [esp + 0x1228], bx
rep stosd dword es:[edi], eax
lea edx, [esp + 0x1228]
push 0x104
lea eax, [esp + 0x9fc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [esp + 0x38]
lea edx, [esp + 0x1228]
push ecx
push edx
lea eax, [esp + 0x24c]
push str.dump
push eax
call esi
lea ecx, [esp + 0xe10]
push ecx
call fcn.0042dc60
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c54
ret