Function at 0x73ab6b
Capabilities:
Check if file exists
Copy file
Delete file
Move file

Disassembly:
push 0xb38
mov eax, 0x7b4948
call fcn.00774621
push 0x3b
mov eax, dword [ebp + 0xc]
lea edi, [ebp - 0x3f8]
pop ecx
mov esi, str.QG42LkGXdIJDv9eywtrybfoZOnol6kF00BF0zfOI67AMvycRci6SchmdUeXYdrInY6MJVLBQDt9Mq3ah6PfWcuermi7CE4H4Ed2WFobVxIqDWhRtMs5o0kL6hk9Q6FdibtDn41QNvKodG2LVkbKKbSM1RKSZt27pneS4bss4Iq3snyvByncbFSPCJ47LObZ9omY99Hy7uuKdRjY3rz3ERBTKgmCwUmUwX57IEtsOw6PGR
mov ebx, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x4d
mov dword [ebp - 0xb28], eax
xor eax, eax
pop ecx
movsw word es:[edi], word [esi]
mov esi, str.k8mmGhzXVxmWmg0o9NXVCC7wpH37RJCimojseaBNX4smgpeZ9Efl8L1BXbcJiDHm59Wgx3iesJxxGOF96rebKFRpF0rO62q9oytQG0CtZ061Zniub3sP3JkrBOjqJks0wY54S02UZduUgAVSrw2hDDwxOyvZvPEDIrpLCbuvs8Z5aqJKKuy6rhQdFSjIYt2oew3lM9M6RQUecj5QUVgeOhhXsJpyjRahcfsQLEQntJ6183Ytb3IT8pr5CzfAFEyWrdnCU31u4DRSxetjoHhoz4HoqPxla7FG7Ws3OYWIECY2Ug1YWTR
mov dword [ebp - 0xb38], ebx
lea edi, [ebp - 0x93c]
mov dword [ebp - 0xb44], eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb3c], eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb0c]
lea eax, [ebp - 0x3f8]
push eax
call fcn.00405a00
lea eax, [ebp - 0xb0c]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0xb44]
call fcn.00407ea0
push 0
push 1
lea ecx, [ebp - 0xb0c]
mov byte [ebp - 4], 0
call fcn.006eb1be
lea eax, [ebp - 0x93c]
push eax
lea ecx, [ebp - 0xb0c]
call fcn.00405a00
lea eax, [ebp - 0xb0c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0xb44]
call fcn.00407ea0
push 0
push 1
lea ecx, [ebp - 0xb0c]
mov byte [ebp - 4], 0
call fcn.006eb1be
mov edi, 0x208
lea eax, [ebp - 0x808]
push edi
push 0
push eax
call fcn.007512b0
push edi
lea eax, [ebp - 0x600]
push 0
push eax
call fcn.007512b0
lea eax, [ebp - 0x808]
push ebx
push eax
call fcn.00761577
mov esi, dword [ebp - 0xb28]
lea eax, [ebp - 0x600]
push esi
push eax
call fcn.00761577
call fcn.006f4ea3
lea eax, [ebp - 0x808]
push eax
call fcn.0075bf65
lea eax, [ebp - 0x600]
push eax
call fcn.0075bf65
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x808]
push eax
call fcn.00761537
add esp, 0x38
test eax, eax
jne 0x73acbf
call fcn.006f076c
jmp 0x73aeac
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x73aeac
xor ebx, ebx
call fcn.00402330
push edi
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.007512b0
add esp, 0xc
test ebx, ebx
jne 0x73ad07
call fcn.006f183c
push esi
lea eax, [ebp - 0x218]
push str._s.bak
push eax
call fcn.00407f20
add esp, 0xc
jmp 0x73ad1d
push ebx
push esi
lea eax, [ebp - 0x218]
push str._s.bak_d
push eax
call fcn.00407f20
add esp, 0x10
call fcn.006ebb33
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x73ad40
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.006eff7c
lea eax, [ebp - 0x218]
push eax
push esi
call fcn.007594a5
pop ecx
pop ecx
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0xb2c], eax
push 0x6e
pop ecx
mov esi, str.c5EWPO1OPwHrWfp48uAWCrWKgeLhibyTV9nYDrqhKs3TtSDebxeAR2ml4mH861eqpDX7uCW31NYYyiNCu5oEW5cIb3CzUpFkPIOs9FpnzhjaPk6cyxHYXVoAZ80VAfOuy9OGKN67p12sCUww2rh6OxrzKJT5LRN5fVzRBRfbQoy06Pgudq8IhPX3SFdxNwRF9c0qsOIALjLY5Qk3MTzaiAYEzpfewaOlSpecZBuGlaMaq5fE86XMdZaM7dPlxT468Rfbx8ExGAWBnFMbro0FhCs9F0DbCTHptenaUmwIYI3KitEN72ZmIOKLOqaCNCj1CgwsiK7GEs48PcdLbH4LowOdb9hDVTfcthSSK6U4sLjwQfn4Pah5Ur7PsF4pUMtBQfbD1PJdaeucA4oY556XwCvdNUXXXJrNNz8DWWwf84TrrSkmnXOcWVG
mov byte [ebp - 4], 3
lea edi, [ebp - 0xaf4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xb24]
call fcn.00405a00
lea eax, [ebp - 0xb24]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0xb34]
call fcn.00407ea0
push 0
push 1
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 3
call fcn.006eb1be
mov eax, dword [ebp - 0xb28]
push 0
push eax
push dword [ebp - 0xb38]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x73ae8b
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0xafc], eax
mov dword [ebp - 0xaf8], eax
push 0x3b
pop ecx
mov esi, str.N9PBbOJWRCWS8k08kHIUjtuwM0OEFbJP8ZoNsyGGXhOXMVIJIPEWWLLIvKH07Lo6ojHXweH0Yoi6B4VR1elrlvi08d2NxQ85PC4IdU6YmlawdOJ4zMvD6yX91KSIH1JY2EQV3H3L9spMhVwtR4H7riEzCeBp2foBlHPZzmIaLaBr5sLr7jqAKZltrJd5YAyZAC3EVEs5UrG8ZUAVPIy3Uu3Tyk6xBnYtIS3XiaHrrwxL
mov byte [ebp - 4], 5
lea edi, [ebp - 0x308]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0xb24]
movsb byte es:[edi], byte [esi]
call fcn.00405a00
lea eax, [ebp - 0xb24]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xb00]
call fcn.00407ea0
push 0
push 1
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 5
call fcn.006eb1be
push 5
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0xb00]
cmp ebx, 0xa
jge 0x73ae84
inc ebx
call fcn.006eb210
lea ecx, [ebp - 0xb34]
mov byte [ebp - 4], 0
call fcn.006eb210
mov esi, dword [ebp - 0xb28]
mov edi, 0x208
jmp 0x73acd5
call fcn.006eb210
jmp 0x73aea1
call fcn.006f0473
push 5
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [ebp - 0xb34]
call fcn.006eb210
lea ecx, [ebp - 0xb44]
call fcn.006eb210
call fcn.007745cb
ret