Function at 0x4b4388
Capabilities:
Check if file exists
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, 0x6b36d4
push esi
mov dword [ebp - 0x30], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4b43b8
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
push 9
mov word [ebp - 0x2c], ax
pop ecx
lea edi, [ebp - 0x2a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ebx, 0x651590
push ebx
lea eax, [ebp - 0x2c]
push 0x14
push eax
call fcn.004b4d63
add esp, 0x10
cmp byte [0x6b3fa9], 0
mov eax, 0x652530
jne 0x4b43f6
mov eax, 0x652534
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push esi
push eax
push str.joinprivate
lea eax, [ebp - 0x2c]
push eax
call edi
cmp byte [0x6b3faa], 0
mov eax, str.se6_bbs
jne 0x4b441c
mov eax, 0x6b2448
push esi
push eax
push str.pdtname
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3258
push str.proctype
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push str.crash
push str.crashtype
lea eax, [ebp - 0x2c]
push eax
call edi
push dword [0x6b32bc]
push ebx
mov ebx, 0x6b7fc8
push ebx
call fcn.004b4d7f
add esp, 0xc
push esi
push ebx
push str.trycatchcnt
lea eax, [ebp - 0x2c]
push eax
call edi
push 0x2000
push 0x6b3fc8
push 0x6a230c
call fcn.004b3a5c
add esp, 0xc
push esi
push 0x6b3fc8
push str.cururl
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b24fc
push str.cmdline
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b2498
push str.pdtver
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b31cc
push 0x6531b0
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3f58
push str.ExcptCode
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3ae4
push str.module
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3ef4
push str.modulever
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3f80
push str.offset
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b2efc
push str.osver
lea eax, [ebp - 0x2c]
push eax
call edi
push esi
push 0x6b3104
push str.iever
lea eax, [ebp - 0x2c]
push eax
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x653218
push 0xffffffffffffffff
push ebx
call fcn.00419d0c
add esp, 0x10
push esi
push ebx
push 0x653220
lea eax, [ebp - 0x2c]
push eax
call edi
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x4b4592
mov ecx, dword [eax]
test ecx, ecx
je 0x4b4575
push esi
push 0x50
push ecx
push str.ExceptionRecord
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
test eax, eax
je 0x4b4592
push esi
push 0x2cc
push eax
push str.ContextRecord
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
push 0x6b34cc
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push 0x2710
push 1
call fcn.004bc871
pop ecx
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x6b32c4
push str._s_u__d__s
push 0x104
push ebx
call fcn.00419d0c
add esp, 0x1c
push 0
push ebx
push 0x6b34cc
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x4b45eb
push esi
push ebx
push str.dump
lea eax, [ebp - 0x2c]
push eax
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403fc1
leave
ret