Function at 0x417499
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
xor ebx, ebx
push edi
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0040eae7
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x263]
mov byte [ebp - 0x264], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x264]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp byte [ebp - 0x264], 0x5c
jne 0x41763a
cmp byte [ebp - 0x263], 0x5c
jne 0x41763a
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
push str..exe
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
push eax
call fcn.00420a59
pop ecx
pop ecx
push str.CopyFileExA
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0x40581a
push ebx
push 0x12
push dword [ebp + 8]
mov dword [ebp - 8], eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, 0x422
push str.Copying_files._Please_wait...
push edi
push eax
mov dword [ebp - 4], eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x5c]
call fcn.00421d78
cmp dword [ebp - 8], ebx
je 0x4175ce
lea eax, [ebp - 0x1c]
push eax
push edi
push dword [ebp - 4]
call esi
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
push eax
call esi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 4]
call esi
mov esi, dword [ebp - 0x14]
push 0xffffff
sub esi, dword [ebp - 0x1c]
push 0xf
sub esi, 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov eax, dword [ebp - 0x20]
push 2
push 0xc56b32
push 0x13
add eax, 0xffffffdd
push esi
push eax
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x5c]
sub eax, esi
sub eax, 0xf
push eax
push dword [ebp - 4]
call fcn.00421ec2
cmp dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
push ebx
jne 0x4175ed
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
jmp 0x41760b
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x160]
push 0x4179f5
push eax
lea eax, [ebp - 0x264]
push eax
call dword [ebp - 8]
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp esi, ebx
je 0x417632
lea eax, [ebp - 0x160]
mov ecx, 0x482ab8
push eax
call fcn.0041ec53
mov byte [0x4836ae], 1
lea ecx, [ebp - 0x5c]
call fcn.00421d89
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp + 8]
mov esi, 0x482320
mov ecx, esi
call fcn.0041bb70
mov ecx, esi
call fcn.004191c8
test eax, eax
jge 0x41766d
push ebx
push str.Couldnt_read_TOC._Aborting.
push ebx
mov ecx, esi
call fcn.0041df67
jmp 0x4178da
mov ecx, esi
call fcn.00418948
cmp dword [0x482884], ebx
mov dword [ebp + 8], ebx
jle 0x417727
push dword [ebp + 8]
mov ecx, 0x482878
call fcn.00421b62
mov edi, eax
cmp edi, ebx
je 0x4176c2
lea eax, [edi + 0x14]
mov ecx, esi
push eax
call fcn.00418d60
lea eax, [edi + 0x20]
mov ecx, esi
push eax
call fcn.00418d60
lea eax, [edi + 0x2c]
mov ecx, esi
push eax
call fcn.00418d60
lea eax, [edi + 0x38]
mov ecx, esi
push eax
call fcn.00418d60
cmp dword [edi + 0x10], 0xffffffff
jne 0x417715
cmp dword [edi + 0x48], ebx
jne 0x417715
lea eax, [edi + 0x14]
lea ecx, [edi + 0x48]
push eax
call fcn.0041ecc1
lea ecx, [edi + 0x48]
call fcn.0041fa6a
push eax
call fcn.0042879e
pop ecx
mov dword [edi + 0x54], eax
push 1
push str._IT_Type_
mov ecx, edi
call fcn.0041ef26
test al, al
je 0x417715
mov edi, dword [edi + 0x54]
cmp edi, 1
je 0x41770f
cmp edi, 2
je 0x41770f
cmp edi, 4
jne 0x417715
mov dword [0x482a14], edi
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [0x482884]
jl 0x417683
cmp dword [0x482a7c], ebx
je 0x417743
cmp byte [0x483654], bl
je 0x417743
cmp byte [0x483655], bl
je 0x4178f3
mov ecx, esi
call fcn.0041dd5b
mov ecx, esi
call fcn.0041cb73
test byte [0x482504], 0x40
je 0x417792
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
mov ecx, 0x482b70
push eax
call fcn.004260f0
lea eax, [ebp - 0x160]
mov ecx, 0x482998
push eax
call fcn.0041ec53
mov ecx, esi
call fcn.0041c9cb
test al, al
jne 0x4178da
cmp dword [0x4829c4], ebx
jne 0x4177ee
mov ecx, esi
call fcn.0041c889
test al, al
jne 0x4178da
cmp dword [0x4829c4], ebx
jne 0x4177ee
mov ecx, esi
call fcn.0041807d
test al, al
je 0x4178f3
cmp dword [0x4829c4], ebx
jne 0x4177ee
mov ecx, esi
call fcn.0041e7d7
test eax, eax
jne 0x4177ee
cmp dword [0x4829c0], ebx
je 0x4178da
test byte [0x482504], 0x40
je 0x417807
test byte [0x48250b], 8
je 0x417807
and byte [0x48250b], 0xf7
cmp dword [0x4829c4], ebx
jne 0x41781e
mov ecx, esi
call fcn.0041e89a
test al, al
je 0x4178da
mov ecx, esi
call fcn.0041aab8
mov edi, eax
cmp edi, ebx
jge 0x41788c
lea ecx, [ebp - 0x18]
call fcn.0041eab0
push edi
lea eax, [ebp - 0x18]
push str.Initialization_failed._Aborting._Error_code:__d
push eax
call fcn.0041f193
add esp, 0xc
lea ecx, [ebp - 0x18]
push ebx
call fcn.0041fa6a
push eax
push ebx
mov ecx, esi
call fcn.0041df67
cmp byte [0x4836ae], bl
je 0x417870
mov ecx, 0x482ab8
call fcn.0041fa6a
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4836ad], bl
lea ecx, [ebp - 0x18]
setne al
mov esi, eax
call fcn.0041ebe6
mov eax, esi
jmp 0x4179ee
cmp dword [0x4824d8], ebx
je 0x4178ba
call fcn.00421249
test al, al
jne 0x4178ba
push ebx
mov ecx, 0x4834c4
call fcn.0041fa6a
push eax
push ebx
mov ecx, esi
call fcn.0041df67
push 1
mov ecx, esi
call fcn.0041cd72
cmp byte [0x483654], bl
push ebx
je 0x41798c
mov edi, 0x482c68
mov ecx, edi
call fcn.00414368
cmp al, bl
mov byte [ebp + 0xb], al
jne 0x417903
cmp byte [0x4836ae], bl
je 0x4178f3
mov ecx, 0x482ab8
call fcn.0041fa6a
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x4836ad], bl
setne al
jmp 0x4179ee
cmp dword [0x4829c4], ebx
je 0x417917
mov ecx, esi
call fcn.00418645
mov byte [ebp + 0xb], al
jmp 0x417958
mov eax, dword [0x482508]
test al, 2
je 0x417929
mov ecx, edi
call fcn.00413bcd
jmp 0x417958
test al, 4
je 0x417937
test ah, 0x80
je 0x417937
push 1
pop edx
jmp 0x417939
xor edx, edx
test al, 8
je 0x417947
test ah, 0x40
je 0x417947
push 1
pop ecx
jmp 0x417949
xor ecx, ecx
shr eax, 0x1b
and al, 1
push eax
push edx
push ecx
mov ecx, edi
call fcn.00414d2a
cmp byte [0x4836ae], bl
je 0x417971
mov ecx, 0x482ab8
call fcn.0041fa6a
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4836ad], bl
je 0x417986
xor eax, eax
cmp byte [ebp + 0xb], bl
jmp 0x4179e7
movzx eax, byte [ebp + 0xb]
jmp 0x4179ee
mov ecx, esi
call fcn.0041a8ad
mov ecx, esi
call fcn.0041ce2d
cmp dword [0x4829c4], ebx
mov edi, eax
je 0x4179b3
mov ecx, esi
call fcn.00418645
neg al
sbb eax, eax
neg eax
mov edi, eax
push 1
mov ecx, esi
call fcn.0041e1b3
cmp byte [0x4836ae], bl
je 0x4179d5
mov ecx, 0x482ab8
call fcn.0041fa6a
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x4836ad], bl
je 0x4179ec
xor eax, eax
cmp edi, ebx
sete al
jmp 0x4179ee
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10