Function at 0x4233a0
Capabilities:
Check if file exists
Copy file
Delete file
Get file attributes
Move file
Read file on windows
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x65c407
mov eax, dword fs:[0]
push eax
sub esp, 0x6b4
mov eax, dword [0x6f7d14]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5b0], ecx
push 0x6c673c
lea ecx, [ebp - 0x458]
call fcn.004193d0
mov dword [ebp - 4], 0
push 4
lea ecx, [ebp - 0x41c]
call fcn.00421720
lea eax, [ebp - 0x41c]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00424840
lea ecx, [ebp - 0x684]
push ecx
mov ecx, dword [ebp + 0x10]
call fcn.004247d0
push eax
lea ecx, [ebp - 0x41c]
call fcn.00424480
movzx edx, al
test edx, edx
je 0x4234bb
lea ecx, [ebp - 0x41c]
call fcn.0041b940
push eax
call fcn.00421770
add esp, 4
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x660], esp
lea ecx, [ebp - 0x41c]
call fcn.0041b940
push eax
mov ecx, esi
call fcn.00419490
call fcn.00424050
add esp, 0x18
mov byte [ebp - 0x5ab], al
movzx eax, byte [ebp - 0x5ab]
test eax, eax
je 0x4234a2
mov ecx, dword [ebp - 0x41c]
mov dword [ebp - 0x5e4], ecx
mov edx, dword [ebp - 0x5e4]
push edx
lea eax, [ebp - 0x674]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.004248b0
mov ecx, dword [eax]
mov dword [ebp - 0x41c], ecx
jmp 0x4234b6
push 0
lea edx, [ebp - 0x678]
push edx
lea ecx, [ebp - 0x41c]
call fcn.004244c0
jmp 0x423405
mov ecx, dword [ebp + 0x10]
call fcn.0041e1d0
test eax, eax
ja 0x4234ee
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x5e8]
jmp 0x424033
mov al, byte [ebp - 0x5c1]
mov byte [ebp - 0x5a9], al
mov cl, byte [ebp - 0x5a9]
mov byte [ebp - 0x5aa], cl
lea edx, [ebp - 0x680]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.004247d0
mov eax, dword [eax]
mov dword [ebp - 0x5ec], eax
mov ecx, dword [ebp - 0x5ec]
mov dword [ebp - 0x5f4], ecx
lea edx, [ebp - 0x690]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.00424840
mov eax, dword [eax]
mov dword [ebp - 0x5f0], eax
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp - 0x5f8], ecx
movzx edx, byte [ebp - 0x5aa]
push edx
mov eax, dword [ebp - 0x5f4]
push eax
mov ecx, dword [ebp - 0x5f8]
push ecx
call fcn.00426960
add esp, 0xc
push 0x180
push 0x40
push 0x8102
push 0x6c6748
lea edx, [ebp - 0x418]
push edx
call fcn.0063ce48
add esp, 0x14
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x418], 0xffffffff
jne 0x4235c0
mov dword [ebp - 0x5fc], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x5fc]
jmp 0x424033
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x68c], 0
xor eax, eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov word [ebp - 0x428], ax
mov ecx, 0xb00
mov word [ebp - 0x434], cx
mov ecx, dword [ebp + 0x10]
call fcn.0041e1d0
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp + 8]
call fcn.00421bd0
movzx edx, al
mov dword [ebp - 0x432], edx
push 0xb0
lea ecx, [ebp - 0x550]
call fcn.00421720
push 1
push 0x23
lea ecx, [ebp - 0x550]
call fcn.00424c60
mov byte [ebp - 4], 1
lea eax, [ebp - 0x540]
push str.__xml_version_1.0____Files_
push eax
call fcn.0041bd80
add esp, 8
lea ecx, [ebp - 0x5a0]
call fcn.00411960
push 0x4c
push 0
lea ecx, [ebp - 0x5a0]
push ecx
call fcn.00633f10
add esp, 0xc
mov dword [ebp - 0x558], 3
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5d0], 0
push 4
lea ecx, [ebp - 0x414]
call fcn.00421720
lea edx, [ebp - 0x414]
push edx
mov ecx, dword [ebp + 0x10]
call fcn.00424840
lea eax, [ebp - 0x65c]
push eax
mov ecx, dword [ebp + 0x10]
call fcn.004247d0
push eax
lea ecx, [ebp - 0x414]
call fcn.00424480
movzx ecx, al
test ecx, ecx
je 0x423b80
push 0
lea edx, [ebp - 0x5a0]
push edx
lea ecx, [ebp - 0x414]
call fcn.00424510
mov ecx, eax
call fcn.00418f40
push eax
mov ecx, dword [ebp + 8]
call fcn.00423140
movzx eax, al
test eax, eax
jne 0x423a86
lea ecx, [ebp - 0x414]
call fcn.00424510
mov ecx, eax
call fcn.00418f40
push eax
mov ecx, dword [ebp - 0x5b0]
call fcn.00423300
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
push ecx
mov ecx, 0x7028a0
call fcn.004280d0
mov dword [ebp - 0x5c8], eax
mov edx, dword [ebp - 0x5a4]
push edx
call fcn.0042aba0
add esp, 4
push eax
mov ecx, 0x7028ac
call fcn.004280d0
mov dword [ebp - 0x5bc], eax
mov ecx, 0x7028ac
call fcn.0040cf30
mov dword [ebp - 0x420], eax
push 0x100
push 0x40
push 0x8000
lea ecx, [ebp - 0x414]
call fcn.00424510
mov ecx, eax
call fcn.00418f40
push eax
lea eax, [ebp - 0x424]
push eax
call fcn.0063ce48
add esp, 0x14
cmp dword [ebp - 0x424], 0xffffffff
jne 0x4237f6
mov dword [ebp - 0x658], 0xffffffff
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.00423370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x658]
jmp 0x424033
mov ecx, dword [ebp - 0x5a4]
push ecx
push 0
mov edx, dword [ebp - 0x5c8]
push edx
call fcn.00633f10
add esp, 0xc
mov eax, dword [ebp - 0x5a4]
push eax
mov ecx, dword [ebp - 0x5c8]
push ecx
mov edx, dword [ebp - 0x424]
push edx
call fcn.0063be3e
add esp, 0xc
mov eax, dword [ebp - 0x420]
push eax
push 0
mov ecx, dword [ebp - 0x5bc]
push ecx
call fcn.00633f10
add esp, 0xc
mov edx, dword [ebp - 0x5a4]
push edx
mov eax, dword [ebp - 0x5c8]
push eax
lea ecx, [ebp - 0x420]
push ecx
mov edx, dword [ebp - 0x5bc]
push edx
call fcn.0042ab80
add esp, 0x10
test eax, eax
je 0x4238bf
mov eax, dword [ebp - 0x418]
push eax
call fcn.0063d25b
add esp, 4
mov ecx, dword [ebp - 0x424]
push ecx
call fcn.0063d25b
add esp, 4
mov dword [ebp - 0x654], 0xfffffffe
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.00423370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x654]
jmp 0x424033
lea ecx, [ebp - 0x414]
call fcn.00424510
mov dword [ebp - 0x648], eax
lea ecx, [ebp - 0x414]
call fcn.00424510
mov ecx, eax
call fcn.00418500
mov dword [ebp - 0x64c], eax
lea ecx, [ebp - 0x414]
call fcn.00424510
mov dword [ebp - 0x650], eax
push 0xffffffffffffffff
push 0x6c6778
mov ecx, dword [ebp - 0x650]
call fcn.00418cd0
add eax, 1
mov dword [ebp - 0x640], eax
mov edx, dword [ebp - 0x64c]
push edx
mov eax, dword [ebp - 0x640]
push eax
lea ecx, [ebp - 0x488]
push ecx
mov ecx, dword [ebp - 0x648]
call fcn.00418c80
mov byte [ebp - 4], 2
lea edx, [ebp - 0x67c]
push edx
lea ecx, [ebp - 0x488]
call fcn.00424a50
mov eax, dword [eax]
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x63c]
mov dword [ebp - 0x604], ecx
lea edx, [ebp - 0x664]
push edx
lea ecx, [ebp - 0x488]
call fcn.004249d0
mov eax, dword [eax]
mov dword [ebp - 0x644], eax
mov ecx, dword [ebp - 0x644]
mov dword [ebp - 0x608], ecx
lea edx, [ebp - 0x668]
push edx
lea ecx, [ebp - 0x488]
call fcn.00424a50
mov eax, dword [eax]
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x600]
mov dword [ebp - 0x60c], ecx
push fcn.0063c608
mov edx, dword [ebp - 0x604]
push edx
mov eax, dword [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0x60c]
push ecx
lea edx, [ebp - 0x66c]
push edx
call fcn.004269e0
add esp, 0x14
mov eax, dword [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x5bc]
push ecx
push 0xb9
mov ecx, dword [ebp - 0x5b0]
call fcn.00421d60
mov edx, dword [ebp - 0x424]
push edx
call fcn.0063d25b
add esp, 4
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x5b4], ecx
mov edx, dword [ebp - 0x5a4]
mov dword [ebp - 0x5d0], edx
lea ecx, [ebp - 0x414]
call fcn.00424510
mov dword [ebp - 0x618], eax
lea ecx, [ebp - 0x414]
call fcn.00424510
mov dword [ebp - 0x610], eax
push 0xffffffffffffffff
push 0x6c677c
mov ecx, dword [ebp - 0x610]
call fcn.00418cd0
add eax, 1
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x614]
push eax
push 0
mov ecx, dword [ebp - 0x618]
call fcn.00424ac0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x488]
call fcn.004191e0
jmp 0x423ac2
mov ecx, dword [ebp - 0x564]
mov dword [ebp - 0x5a4], ecx
mov edx, dword [ebp - 0x560]
mov dword [ebp - 0x420], edx
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x560]
mov dword [ebp - 0x5b4], ecx
mov edx, dword [ebp - 0x564]
mov dword [ebp - 0x5d0], edx
mov eax, dword [ebp - 0x5b4]
push eax
mov ecx, dword [ebp - 0x5c0]
push ecx
mov edx, dword [ebp - 0x418]
push edx
call fcn.0063d906
add esp, 0xc
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0x5b4]
push eax
mov ecx, dword [ebp - 0x5c0]
push ecx
mov edx, dword [ebp - 0x5cc]
push edx
call fcn.004284e0
add esp, 0xc
mov dword [ebp - 0x5cc], eax
push 0
push 0
mov eax, dword [ebp - 0x5cc]
push eax
mov ecx, dword [ebp - 0x5b4]
push ecx
mov edx, dword [ebp - 0x5d0]
push edx
lea ecx, [ebp - 0x414]
call fcn.00424510
mov ecx, eax
call fcn.00418f40
push eax
push str._File_Name__s__Size__d__CompressedSize__d__Checksum__08x__FileTime__08x__Algorithm__d____
push 0x400
lea eax, [ebp - 0x410]
push eax
call fcn.00426930
add esp, 0x24
lea ecx, [ebp - 0x540]
lea edx, [ebp - 0x410]
push edx
push ecx
call fcn.0041bd80
add esp, 8
push 0
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0x414]
call fcn.004244c0
jmp 0x4236c9
lea ecx, [ebp - 0x540]
push str.__Files_
push ecx
call fcn.0041bd80
add esp, 8
lea edx, [ebp - 0x540]
mov dword [ebp - 0x61c], edx
lea eax, [ebp - 0x6c0]
push eax
mov ecx, dword [ebp - 0x61c]
call fcn.00425500
mov ecx, eax
call fcn.00425a20
mov dword [ebp - 0x42a], eax
push 1
mov ecx, dword [ebp - 0x42a]
push ecx
push 0
lea edx, [ebp - 0x550]
push edx
call fcn.00428a90
add esp, 0x10
mov dword [ebp - 0x42e], eax
mov eax, dword [ebp - 0x42a]
add eax, 0x16
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x423c01
dec ecx
or ecx, 0xfffffff8
inc ecx
test ecx, ecx
jne 0x423c13
mov edx, dword [ebp - 0x554]
mov dword [ebp - 0x5d8], edx
jmp 0x423c38
mov eax, dword [ebp - 0x554]
and eax, reloc.OLEAUT32.dll_VariantInit
jns 0x423c25
dec eax
or eax, 0xfffffff8
inc eax
mov ecx, 8
sub ecx, eax
add ecx, dword [ebp - 0x554]
mov dword [ebp - 0x5d8], ecx
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x554]
push eax
call fcn.004eab55
add esp, 4
mov dword [ebp - 0x620], eax
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0x5a8], ecx
mov edx, dword [ebp - 0x554]
push edx
push 0
mov eax, dword [ebp - 0x5a8]
push eax
call fcn.00633f10
add esp, 0xc
mov ecx, dword [ebp - 0x5a8]
mov edx, dword [ebp - 0x43c]
mov dword [ecx], edx
mov eax, dword [ebp - 0x438]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x434]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x430]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x42c]
mov dword [ecx + 0x10], edx
mov ax, word [ebp - 0x428]
mov word [ecx + 0x14], ax
lea ecx, [ebp - 0x6a8]
push ecx
lea ecx, [ebp - 0x550]
call fcn.00424bc0
mov dword [ebp - 0x624], eax
mov edx, dword [ebp - 0x42a]
push edx
mov ecx, dword [ebp - 0x624]
call fcn.00418f40
push eax
mov eax, 1
imul ecx, eax, 0x16
add ecx, dword [ebp - 0x5a8]
push ecx
call fcn.00633410
add esp, 0xc
lea ecx, [ebp - 0x6a8]
call fcn.004191e0
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x4a0]
call fcn.004193d0
mov byte [ebp - 4], 3
call fcn.0063c668
and eax, 0x8000003f
jns 0x423d2b
dec eax
or eax, 0xffffffc0
inc eax
movzx eax, byte [eax + 0x6c6a60]
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x554]
push ecx
mov edx, dword [ebp - 0x5a8]
push edx
mov eax, dword [ebp - 0x440]
push eax
mov ecx, dword [ebp - 0x5b0]
call fcn.00421d60
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063b94b
add esp, 4
mov dword [ebp - 0x5d4], eax
mov edx, dword [ebp - 0x5d4]
push edx
call fcn.004eab55
add esp, 4
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x5b8], eax
push 0
push 0
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063df46
add esp, 0xc
mov edx, dword [ebp - 0x5d4]
push edx
mov eax, dword [ebp - 0x5b8]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063be3e
add esp, 0xc
push 0
push 0
mov edx, dword [ebp - 0x418]
push edx
call fcn.0063df46
add esp, 0xc
push 4
lea eax, [ebp - 0x554]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063d906
add esp, 0xc
mov edx, dword [ebp - 0x554]
push edx
mov eax, dword [ebp - 0x5a8]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063d906
add esp, 0xc
push 4
lea edx, [ebp - 0x440]
push edx
mov eax, dword [ebp - 0x418]
push eax
call fcn.0063d906
add esp, 0xc
mov ecx, dword [ebp - 0x5d4]
push ecx
mov edx, dword [ebp - 0x5b8]
push edx
mov eax, dword [ebp - 0x418]
push eax
call fcn.0063d906
add esp, 0xc
mov ecx, dword [ebp - 0x418]
push ecx
call fcn.0063d25b
add esp, 4
mov edx, dword [ebp - 0x5b0]
cmp dword [edx + 0x170], 0
jle 0x423e6e
mov eax, dword [ebp - 0x5b0]
mov ecx, dword [eax + 0x170]
push ecx
call fcn.0063d25b
add esp, 4
mov edx, dword [ebp - 0x5b0]
mov dword [edx + 0x170], 0xffffffff
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x5dc], eax
mov ecx, dword [ebp - 0x5dc]
push ecx
call fcn.004eab50
add esp, 4
cmp dword [ebp - 0x5dc], 0
jne 0x423eae
mov dword [ebp - 0x62c], 0
jmp 0x423ec4
mov dword [ebp - 0x5b8], 0x8123
mov edx, dword [ebp - 0x5b8]
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5e0]
push ecx
call fcn.004eab50
add esp, 4
cmp dword [ebp - 0x5e0], 0
jne 0x423ef4
mov dword [ebp - 0x630], 0
jmp 0x423f0a
mov dword [ebp - 0x5a8], 0x8123
mov edx, dword [ebp - 0x5a8]
mov dword [ebp - 0x630], edx
push 0x80
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x470]
call fcn.004193d0
mov byte [ebp - 4], 4
push str..bkp
lea ecx, [ebp - 0x470]
call fcn.00419110
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x423fb6
lea ecx, [ebp - 0x470]
call fcn.00418f40
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x423fb6
mov dword [ebp - 0x634], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x470]
call fcn.004191e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a0]
call fcn.004191e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.00423370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x634]
jmp 0x424033
push 0
mov ecx, dword [ebp + 0xc]
push ecx
push 0x6c67f4
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x6c6804
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x458]
call fcn.00418f40
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x638], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x470]
call fcn.004191e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a0]
call fcn.004191e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x550]
call fcn.00423370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.004191e0
mov eax, dword [ebp - 0x638]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0062fc3e
mov esp, ebp
pop ebp
ret 0x10