Function at 0x40ae85
Capabilities:
Copy file
Delete file
Get common file path
Get file attributes
Get file size
Move file
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6cc
push esi
push edi
mov dword [ebp - 0x6cc], ecx
mov ecx, 5
mov esi, str.TASAntiPhishing.dll
lea edi, [ebp - 0x244]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 5
mov esi, str.TASAntiPhishing_1.dll
lea edi, [ebp - 0x6bc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [0x4535a4]
mov dword [ebp - 0x378], eax
mov ecx, dword [0x4535a8]
mov dword [ebp - 0x374], ecx
mov dl, byte [0x4535ac]
mov byte [ebp - 0x370], dl
mov byte [ebp - 0x360], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x35f]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x588], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x587]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x698], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x697]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x11c], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x11b]
rep stosd dword es:[edi], eax
mov eax, dword [str.TAPToggleOn]
mov dword [ebp - 0x6a4], eax
mov ecx, dword [0x4535b4]
mov dword [ebp - 0x6a0], ecx
mov edx, dword [0x4535b8]
mov dword [ebp - 0x69c], edx
mov dword [ebp - 0x590], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x58c], 0xffffffff
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x36c], 0
mov byte [ebp - 0x14], 0
xor eax, eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
mov byte [ebp - 0x224], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x223]
rep stosd dword es:[edi], eax
mov byte [ebp - 0x480], 0
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x47f]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x24c], 0
push 0x6c
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x22c], 0
push 0x104
lea edx, [ebp - 0x480]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x40b04c
jmp 0x40b52c
xor eax, eax
test eax, eax
jne 0x40b02f
lea ecx, [ebp - 0x378]
push ecx
lea edx, [ebp - 0x480]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x40b07d
jmp 0x40b52a
xor eax, eax
test eax, eax
jne 0x40b06f
cmp dword [ebp - 0x24c], 0
je 0x40b095
mov ecx, dword [ebp - 0x24c]
mov byte [ecx], 0
lea edx, [ebp - 0x480]
push edx
lea eax, [ebp - 0x360]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x360]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x588]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x6bc]
push edx
lea eax, [ebp - 0x588]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
cmp dword [0x45ef34], 0
je 0x40b0fb
jmp 0x40b528
xor ecx, ecx
test ecx, ecx
jne 0x40b0ed
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea edx, [ebp - 0x360]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0xffffffff
je 0x40b250
push 0
mov eax, dword [ebp - 0x58c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
jbe 0x40b1f0
push 0
push 0
push 0
push 2
push 0
mov ecx, dword [ebp - 0x58c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
je 0x40b1f0
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x364]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x40b1f0
cmp dword [ebp - 0x248], 0
je 0x40b1f0
mov ecx, dword [ebp - 0x248]
call fcn.00404fcc
mov eax, dword [ebp - 0x368]
push eax
mov ecx, dword [ebp - 0x254]
push ecx
mov ecx, dword [ebp - 0x248]
call fcn.00405019
push 0x10
mov ecx, dword [ebp - 0x248]
call fcn.00404fa0
push eax
lea edx, [ebp - 0x14]
push edx
call sub.MSVCRT.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x250], 1
cmp dword [ebp - 0x254], 0
je 0x40b210
mov eax, dword [ebp - 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x254], 0
cmp dword [ebp - 0x364], 0
je 0x40b230
mov ecx, dword [ebp - 0x364]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x364], 0
cmp dword [ebp - 0x58c], 0
je 0x40b250
mov edx, dword [ebp - 0x58c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x58c], 0xffffffff
lea eax, [ebp - 0x698]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea ecx, [ebp - 0x6bc]
push ecx
lea edx, [ebp - 0x698]
push edx
push str._s_s__u
push 0x104
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0x18
lea ecx, [ebp - 0x588]
push ecx
push 0x104
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0xc
cmp dword [ebp - 0x36c], 0
jne 0x40b41a
cmp dword [ebp - 0x250], 0
je 0x40b41a
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0xffffffff
je 0x40b3ba
push 0
mov ecx, dword [ebp - 0x58c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
jbe 0x40b3ba
push 0
push 0
push 0
push 2
push 0
mov edx, dword [ebp - 0x58c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
je 0x40b3ba
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x364]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x40b3ba
cmp dword [ebp - 0x248], 0
je 0x40b3ba
mov ecx, dword [ebp - 0x248]
call fcn.00404fcc
mov ecx, dword [ebp - 0x368]
push ecx
mov edx, dword [ebp - 0x254]
push edx
mov ecx, dword [ebp - 0x248]
call fcn.00405019
push 0x10
mov ecx, dword [ebp - 0x248]
call fcn.00404fa0
push eax
lea eax, [ebp - 0x14]
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x40b3ba
mov dword [ebp - 0x36c], 1
cmp dword [ebp - 0x254], 0
je 0x40b3da
mov ecx, dword [ebp - 0x254]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x254], 0
cmp dword [ebp - 0x364], 0
je 0x40b3fa
mov edx, dword [ebp - 0x364]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x364], 0
cmp dword [ebp - 0x58c], 0
je 0x40b41a
mov eax, dword [ebp - 0x58c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x58c], 0xffffffff
push 3
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x224]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
push 4
push 0
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov dword [ebp - 0x6c0], eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 4], eax
xor edx, edx
test edx, edx
jne 0x40b291
cmp dword [ebp - 0x36c], 0
je 0x40b488
lea eax, [ebp - 0x588]
push eax
push 0x104
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.MSVCRT.dll__snprintf]
add esp, 0xc
jmp 0x40b49e
push 0
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x360]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x45ef34], eax
cmp dword [0x45ef34], 0
jne 0x40b4bb
jmp 0x40b526
xor edx, edx
test edx, edx
jne 0x40b4b0
lea eax, [ebp - 0x6a4]
push eax
mov ecx, dword [0x45ef34]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
je 0x40b4fa
mov edx, dword [0x45ef34]
push edx
call dword [ebp - 0x22c]
add esp, 4
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x248], 0
je 0x40b51e
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov eax, dword [ebp - 0x590]
jmp 0x40b52e
jmp 0x40b4fa
jmp 0x40b4fa
jmp 0x40b4fa
jmp 0x40b4fa
pop edi
pop esi
mov esp, ebp
pop ebp
ret