Function at 0x489950
Capabilities:
Copy file
Delete file
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x6e84
call fcn.006ab750
push ebx
mov ebx, dword [esp + 0x6e90]
mov eax, dword [ebx + 4]
push ebp
push esi
push edi
push 2
push 0xffffffffffffffff
push 0x100c
push 0x64
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jge 0x48999f
mov eax, dword [esp + 0x6e98]
mov dword [eax], 2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6e84
ret 8
lea esi, [esp + 0x70]
mov edx, ebx
call fcn.0045aca0
mov ecx, esi
push ecx
lea edx, [esp + 0x1a7c]
push edx
call fcn.00474990
mov edi, dword [ebx + 4]
lea eax, [esp + 0x1a78]
call fcn.00477590
test al, al
je 0x489cab
mov edx, esi
lea esi, [esp + 0x278]
call fcn.004011d0
lea esi, [esp + 0x70]
lea edi, [esp + 0x480]
call fcn.004ad1c0
mov eax, edi
push eax
call fcn.0069cab9
mov edx, dword [ebx + 4]
add esp, 4
mov ecx, edi
push ecx
push edx
lea esi, [esp + 0x280]
call fcn.004ac920
test al, al
je 0x489cab
call fcn.00649c90
push eax
mov eax, str.VideoOutput
lea esi, [esp + 0xca4]
call fcn.00408870
mov dword [esp + 0x10], 0x6dbbf0
call fcn.0067fc80
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0x62]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
lea ecx, [esp + 0x18]
call fcn.005ebcd0
lea ecx, [esp + 0x278]
lea eax, [esp + 0x70]
jmp 0x489a60
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x489a86
test dx, dx
je 0x489a82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x489a86
add eax, 4
add ecx, 4
test dx, dx
jne 0x489a60
xor eax, eax
jmp 0x489a8b
sbb eax, eax
sbb eax, 0xffffffff
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete bl
test bl, bl
je 0x489b06
lea esi, [esp + 0xa98]
call fcn.00401df0
lea edx, [esp + 0x70]
lea esi, [esp + 0x890]
call fcn.004ad160
push 0x6bc0cc
mov ecx, esi
push ecx
lea edx, [esp + 0x690]
push edx
lea eax, [esp + 0xaa4]
call fcn.004ad3a0
push 0
lea eax, [esp + 0x68c]
push eax
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x489b04
lea edx, [esp + 0x70]
push edx
call ebp
lea edx, [esp + 0x688]
lea esi, [esp + 0x70]
call fcn.004011d0
jmp 0x489b06
xor bl, bl
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0x1c]
push eax
call fcn.006686a0
lea ecx, [esp + 0xca0]
push ecx
lea edx, [esp + 0x27c]
push edx
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x24]
lea esi, [esp + 0x44]
call fcn.00408df0
mov eax, esi
lea edx, [esp + 0x10]
lea esi, [esp + 0x1c]
call fcn.00408f40
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x489b9f
mov ebx, dword [esp + 0x6e98]
lea esi, [esp + 0x38]
mov dword [ebx], eax
call fcn.0042a370
lea ecx, [esp + 0x18]
call fcn.005ebde0
lea esi, [esp + 0x14]
call fcn.0067fe40
lea edi, [esp + 0x1a78]
mov dword [esp + 0x10], 0x70c5e4
call fcn.00474f20
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6e84
ret 8
mov edi, dword [esp + 0x6e9c]
lea ecx, [esp + 0x38]
mov dword [esp + 0x20], ecx
lea edx, [esp + 0x5a]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x1bd9]
lea ecx, [esp + 0x62]
mov dword [esp + 0x2c], ecx
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x20]
mov dword [esp + 0x30], edx
mov edx, dword [edi + 4]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1bdd]
push ecx
push edx
lea esi, [esp + 0x24]
mov dword [esp + 0x3c], eax
call fcn.0048dd50
test bl, bl
je 0x489bf9
lea eax, [esp + 0x70]
push eax
call ebp
mov ebx, dword [esp + 0x1c]
test ebx, ebx
jne 0x489c0d
push 1
push 1
push edi
call fcn.00459720
jmp 0x489c29
lea edi, [esp + 0x5a]
call fcn.0067f980
lea esi, [esp + 0x62]
call fcn.005ebb80
lea ecx, [esp + 0x278]
push ecx
call ebp
call fcn.004b6470
test al, al
jne 0x489c63
push str.Z5bj
call fcn.004bf140
test al, al
je 0x489c63
push 0
push str.Trim
mov eax, str.Registration
call fcn.004811b0
push str.Trim
add eax, 1
push str.Registration
call fcn.00480f20
mov ebp, dword [esp + 0x6e98]
lea esi, [esp + 0x38]
mov dword [ebp], ebx
call fcn.0042a370
lea ecx, [esp + 0x18]
call fcn.005ebde0
lea esi, [esp + 0x14]
call fcn.0067fe40
lea edi, [esp + 0x1a78]
mov dword [esp + 0x10], 0x70c5e4
call fcn.00474f20
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6e84
ret 8
mov esi, dword [esp + 0x6e98]
lea edi, [esp + 0x1a78]
mov dword [esi], 1
call fcn.00474f20
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x6e84
ret 8