Function at 0x4a017f
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push 0xabc
mov eax, 0x4c58e1
call fcn.004ac3e5
lea eax, [ebp - 0x21c]
push eax
mov edi, ecx
xor ebx, ebx
push 0x104
mov dword [ebp - 0xab4], edi
mov dword [ebp - 0xab0], ebx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x690]
mov dword [ebp - 0x69c], ebx
mov dword [ebp - 0x698], 0x200
mov dword [ebp - 0x694], eax
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], ebx
call fcn.00409bb0
pop ecx
push eax
mov eax, str._se_crashdump_
call fcn.00409bb0
pop ecx
push eax
mov eax, dword [edi]
call fcn.00409bb0
pop ecx
push 0x5f
call fcn.00412f0f
pop ecx
push dword [edi + 0xc]
mov esi, eax
call fcn.00494f06
pop ecx
push 0x5f
call fcn.00412f0f
pop ecx
push dword [edi + 0x10]
mov esi, eax
call fcn.00494f06
pop ecx
push 0x5f
call fcn.00412f0f
pop ecx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00494f06
pop ecx
push eax
mov eax, 0x4e2b94
call fcn.00409bb0
mov edx, dword [ebp - 0x69c]
pop ecx
mov ecx, dword [ebp - 0x694]
xor eax, eax
mov word [ecx + edx*2], ax
push dword [ebp - 0x694]
call fcn.004a30a5
mov esi, eax
pop ecx
push esi
mov ecx, edi
mov dword [ebp - 0xac0], esi
call fcn.004a0df1
pop ecx
push esi
mov ecx, edi
call fcn.004a116f
pop ecx
push esi
mov ecx, edi
call fcn.004a0634
mov eax, dword [edi + 0x44]
pop ecx
mov ecx, dword [edi + 0x40]
sub eax, ecx
push 0x1c
mov dword [ebp - 0xabc], ebx
cdq
pop esi
idiv esi
test eax, eax
je 0x4a0405
mov dword [ebp - 0xac8], 0x5c
mov dword [ebp - 0xac4], 0xfde9
mov dword [ebp - 0xab8], ebx
mov esi, dword [ebp - 0xab8]
lea eax, [ebp - 0xac8]
add esi, ecx
push eax
mov eax, esi
call fcn.0047ac21
cmp eax, 0xffffffff
jne 0x4a02eb
push esi
lea esi, [ebp - 0x270]
call fcn.00409de0
mov byte [ebp - 4], 1
or dword [ebp - 0xab0], 1
jmp 0x4a0307
push 0xffffffffffffffff
inc eax
push eax
push esi
lea esi, [ebp - 0x254]
call fcn.0040f240
push 2
pop ecx
mov dword [ebp - 4], ecx
or dword [ebp - 0xab0], ecx
mov ebx, eax
lea esi, [ebp - 0x238]
call fcn.00409dc6
mov dword [ebp - 4], 3
test byte [ebp - 0xab0], 2
je 0x4a0340
and dword [ebp - 0xab0], 0xfffffffd
push 1
xor edi, edi
lea esi, [ebp - 0x254]
call fcn.0040a3ed
mov edi, dword [ebp - 0xab4]
xor ebx, ebx
inc ebx
mov byte [ebp - 4], 5
test byte [ebp - 0xab0], bl
je 0x4a036a
and dword [ebp - 0xab0], 0xfffffffe
push ebx
xor edi, edi
lea esi, [ebp - 0x270]
call fcn.0040a3ed
mov edi, dword [ebp - 0xab4]
push dword [ebp - 0xac4]
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x238]
call fcn.00412ebd
pop ecx
pop ecx
mov byte [ebp - 4], 6
mov edi, dword [edi + 0x40]
add edi, dword [ebp - 0xab8]
cmp dword [edi + 0x14], 8
jb 0x4a0399
mov edi, dword [edi]
cmp dword [eax + 0x14], 0x10
jb 0x4a03a1
mov eax, dword [eax]
push edi
mov edi, dword [ebp - 0xac0]
push eax
call fcn.004a3195
pop ecx
pop ecx
push 0
push ebx
lea ecx, [ebp - 0x28c]
call fcn.0040a0a5
push ebx
xor edi, edi
lea esi, [ebp - 0x238]
mov byte [ebp - 4], 0
call fcn.0040a3ed
mov eax, dword [ebp - 0xab4]
mov ecx, dword [eax + 0x40]
mov eax, dword [eax + 0x44]
sub eax, ecx
push 0x1c
cdq
pop esi
idiv esi
inc dword [ebp - 0xabc]
add dword [ebp - 0xab8], 0x1c
mov edi, dword [ebp - 0xab4]
cmp dword [ebp - 0xabc], eax
jb 0x4a02b7
xor ebx, ebx
mov esi, dword [ebp - 0xac0]
call fcn.004a32bf
lea eax, [ebp - 0xaa0]
mov dword [ebp - 0xaac], ebx
mov dword [ebp - 0xaa8], 0x200
mov dword [ebp - 0xaa4], eax
lea eax, [ebp - 0xaac]
push eax
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 7
call fcn.00409bb0
pop ecx
push 0x5c
call fcn.00412f0f
pop ecx
push eax
mov eax, dword [edi]
call fcn.00409bb0
pop ecx
push eax
mov eax, 0x4e2b94
call fcn.00409bb0
mov edx, dword [ebp - 0xaac]
pop ecx
mov ecx, dword [ebp - 0xaa4]
xor eax, eax
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 0xaa4]
mov edx, dword [ebp - 0x694]
mov esi, dword [ebp - 0x69c]
push ebx
xor ecx, ecx
push eax
mov word [edx + esi*2], cx
push dword [ebp - 0x694]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [ebp - 0x694]
mov edx, dword [ebp - 0x69c]
xor eax, eax
mov word [ecx + edx*2], ax
push dword [ebp - 0x694]
mov ecx, edi
call fcn.004a0963
mov edx, dword [ebp - 0x69c]
pop ecx
mov ecx, dword [ebp - 0x694]
xor eax, eax
mov word [ecx + edx*2], ax
push dword [ebp - 0x694]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xaa0]
cmp dword [ebp - 0xaa4], eax
je 0x4a04f0
push dword [ebp - 0xaa4]
call fcn.004a5f5b
pop ecx
lea eax, [ebp - 0x690]
cmp dword [ebp - 0x694], eax
je 0x4a050a
push dword [ebp - 0x694]
call fcn.004a5f5b
pop ecx
call fcn.004ac468
ret