Function at 0x4cc890
Capabilities:
Copy file
Delete file
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fc6b0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf04
push ebx
push esi
push edi
lea eax, [ebp - 0x90]
mov dword [ebp - 0x10], esp
xor ebx, ebx
push 0x80
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [ebp - 0xc10]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xe10]
push edx
push str._sdllcache
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0xf10]
push ecx
push str._sdllcache_bk
push edx
call fcn.004f175f
push str.c:endpcache_re_bk.exe
lea eax, [ebp - 0x390]
push 0x50d39c
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x790]
push ecx
push str._sdllcache_bk_regedit.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xd10]
push eax
push str._sdllcache_regedit.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor edi, edi
xor esi, esi
call fcn.004f2beb
add esp, 0x40
lea edx, [ebp - 0x390]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4cc98a
mov edi, 1
lea eax, [ebp - 0x790]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4cc9b0
mov esi, 1
cmp edi, 1
jne 0x4cc9d6
cmp esi, ebx
jne 0x4cca3d
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x790]
push ebx
lea edx, [ebp - 0x390]
push ecx
push edx
call esi
jmp 0x4cca43
cmp esi, 1
jne 0x4cca24
lea eax, [ebp - 0x390]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x390]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea edx, [ebp - 0x390]
push ebx
lea eax, [ebp - 0x790]
push edx
push eax
call esi
lea ecx, [ebp - 0x390]
push ebx
lea edx, [ebp - 0x790]
push ecx
push edx
call esi
jmp 0x4cca43
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0x390]
push ebx
lea ecx, [ebp - 0xd10]
push eax
push ecx
call esi
jmp 0x4cca43
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push str.c:endpcache
lea edx, [ebp - 0x690]
push str._sex_bk.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x890]
push eax
push str._sdllcache_bkexplorer.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0xa90]
push edx
push str._sdllcacheexplorer.exe
push eax
call fcn.004f175f
push str.c:endpcache
xor edi, edi
call fcn.004f2beb
lea ecx, [ebp - 0x690]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccabb
mov ebx, 1
lea edx, [ebp - 0x890]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccae1
mov edi, 1
cmp ebx, 1
jne 0x4ccafa
test edi, edi
jne 0x4ccb33
lea eax, [ebp - 0x890]
push edi
push eax
lea ecx, [ebp - 0x690]
jmp 0x4ccb30
cmp edi, 1
push 0
jne 0x4ccb23
lea edx, [ebp - 0x690]
lea eax, [ebp - 0x890]
push edx
push eax
call esi
lea ecx, [ebp - 0x690]
push 0
lea edx, [ebp - 0x890]
push ecx
push edx
jmp 0x4ccb31
lea eax, [ebp - 0x690]
lea ecx, [ebp - 0xa90]
push eax
push ecx
call esi
push str.c:endpcache
lea edx, [ebp - 0x190]
push str._slog_bk.exe
push edx
xor ebx, ebx
xor edi, edi
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x290]
push eax
push str._sdllcache_bklogonui.exe
push ecx
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x990]
push edx
push str._sdllcachelogonui.exe
push eax
call fcn.004f175f
push str.c:endpcache
call fcn.004f2beb
lea ecx, [ebp - 0x190]
push ecx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccbad
mov ebx, 1
lea edx, [ebp - 0x290]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccbd3
mov edi, 1
cmp ebx, 1
jne 0x4ccbed
test edi, edi
jne 0x4ccc47
lea eax, [ebp - 0x290]
push edi
lea ecx, [ebp - 0x190]
push eax
push ecx
jmp 0x4ccc45
cmp edi, 1
jne 0x4ccc35
lea edx, [ebp - 0x190]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x190]
push 0
lea edx, [ebp - 0x290]
push ecx
push edx
call esi
lea eax, [ebp - 0x190]
push 0
lea ecx, [ebp - 0x290]
push eax
push ecx
jmp 0x4ccc45
lea edx, [ebp - 0x190]
push 0
lea eax, [ebp - 0x990]
push edx
push eax
call esi
push str.c:endpcache
lea ecx, [ebp - 0x190]
push str._s_serv_bk.exe
push ecx
xor ebx, ebx
xor edi, edi
call fcn.004f175f
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x290]
push edx
push str._sdllcache_bk_services.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x990]
push ecx
push str._sdllcache_services.exe
push edx
call fcn.004f175f
push str.c:endpcache
call fcn.004f2beb
lea eax, [ebp - 0x190]
push eax
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4cccc1
mov ebx, 1
lea ecx, [ebp - 0x290]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccce7
mov edi, 1
cmp ebx, 1
jne 0x4ccd01
test edi, edi
jne 0x4ccd5b
lea edx, [ebp - 0x290]
push edi
lea eax, [ebp - 0x190]
push edx
push eax
jmp 0x4ccd59
cmp edi, 1
jne 0x4ccd49
lea ecx, [ebp - 0x190]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x190]
push 0
lea ecx, [ebp - 0x290]
push eax
push ecx
call esi
lea edx, [ebp - 0x190]
push 0
lea eax, [ebp - 0x290]
push edx
push eax
jmp 0x4ccd59
lea ecx, [ebp - 0x190]
push 0
lea edx, [ebp - 0x990]
push ecx
push edx
call esi
push str.c:endpcache
lea eax, [ebp - 0x590]
push str._smmc_bk.exe
push eax
call fcn.004f175f
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x490]
push ecx
push str._sdllcache_bkmmc.exe
push edx
call fcn.004f175f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xb90]
push eax
push str._sdllcachemmc.exe
push ecx
call fcn.004f175f
push str.c:endpcache
xor ebx, ebx
xor edi, edi
call fcn.004f2beb
lea edx, [ebp - 0x590]
push edx
call fcn.004bd410
add esp, 0x2c
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccdd5
mov ebx, 1
lea eax, [ebp - 0x490]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x4ccdfb
mov edi, 1
cmp ebx, 1
jne 0x4cce2c
test edi, edi
jne 0x4cce99
lea ecx, [ebp - 0x490]
push edi
lea edx, [ebp - 0x590]
push ecx
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 1
jne 0x4cce87
lea eax, [ebp - 0x490]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x490]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea edx, [ebp - 0x590]
push 0
lea eax, [ebp - 0x490]
push edx
push eax
call esi
lea ecx, [ebp - 0x590]
push 0
lea edx, [ebp - 0x490]
push ecx
push edx
call esi
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x590]
push 0
lea ecx, [ebp - 0xb90]
push eax
push ecx
call esi
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret