Function at 0x40d4b0
Capabilities:
Copy file
Delete file
Get common file path
Get startup folder
Move file
Write file to startup folder

Disassembly:
sub esp, 0x30c
mov eax, dword [0x45d320]
mov dword [esp + 0x308], eax
push ebx
push ebp
push esi
push edi
mov ecx, dword [0x45b9b8]
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
mov ebx, dword [0x45b9ac]
mov ebp, dword [0x45b9bc]
imul ebp, ebp, 0x346bb5
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x8814777b
imul ebx
add edx, ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
sub ebp, eax
mov ebx, dword [0x45b9c0]
mov eax, edx
imul ebx, ebx, 0x533b61
imul eax, eax, 0x40e326
add ebp, eax
mov edi, dword [0x45b9c8]
mov eax, 0x7595e9bf
imul edi, edi, 0x458786
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, edi
add ebx, ebp
add eax, ebx
mov ebp, dword [0x45b9a8]
add eax, esi
imul ebp, ebp, str.LresultFromObject
mov dword [0x45b9bc], eax
mov eax, 0x7e3fea57
imul ecx
imul ecx, ecx, 0x671938
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9c4]
sub ebp, eax
mov ebx, dword [0x45b9b4]
mov eax, 0x7595e9bf
imul edx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
add eax, ecx
sub eax, esi
add eax, edi
push 0
push 0x44bd2c
mov dword [0x45b9c4], eax
call fcn.0042f79d
add esp, 8
cmp eax, 0xffffffff
je 0x40da8e
push 0
push 0x44bd2c
call fcn.0042f79d
add esp, 8
cmp eax, 0xffffffff
je 0x40da8e
mov ecx, dword [0x45b9c4]
mov esi, dword [0x45b9a8]
mov eax, 0x9c46284d
imul ecx
add edx, ecx
sar edx, 0x15
mov edi, esi
mov ebx, edx
imul edi, edi, 0x346bb5
add edi, edx
mov eax, 0x8814777b
imul ecx
add edx, ecx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45b9c0]
imul edx, edx, 0x40e326
shr ebx, 0x1f
add ebx, edi
sub ebx, ecx
mov ecx, dword [0x45b9b0]
sub ebx, edx
mov eax, 0xc4d8f4f
imul ecx
sar edx, 0x12
mov ecx, edx
add ebx, edx
mov eax, 0x9eea7d1d
imul esi
shr ecx, 0x1f
add edx, esi
sar edx, 0x16
add ecx, ebx
mov eax, edx
add ecx, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45b9c8]
imul ecx, ecx, 0x458786
push 0x104
lea edx, [esp + 0x21c]
push edx
add eax, ecx
push 0
mov dword [0x45b9a8], eax
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameA]
lea eax, [esp + 0x218]
push 0x5c
push eax
call fcn.00430210
push str..tmp
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x28]
mov esi, eax
push str._s_s
push edx
inc esi
call fcn.0042f401
mov ecx, dword [0x45b9b0]
mov edi, dword [0x45b9a8]
mov eax, 0x69527c69
imul edi, edi, 0x78665a
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x14
imul ecx, ecx, 0x45ab1c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov ecx, dword [0x45b9bc]
mov eax, 0x7595e9bf
imul ecx
sar edx, 0x15
mov eax, edx
add esp, 0x18
shr eax, 0x1f
mov ecx, dword [0x45b9c8]
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
imul ecx, ecx, 0x458786
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
mov ecx, dword [0x45b9c4]
push 0
sub eax, ecx
push 0x18
lea ecx, [esp + 0x120]
push ecx
sub eax, 0x346bb5
push 0
mov dword [0x45b9b0], eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [esp + 0x118]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40d752
sub eax, ecx
push esi
lea edx, [esp + eax + 0x11c]
push 0x44c148
push edx
call fcn.0042f401
mov esi, dword [0x45b9c8]
mov ebx, dword [0x45b9ac]
mov edi, dword [0x45b9b4]
imul ebx, ebx, str.LresultFromObject
mov eax, 0x1ed25ed3
imul esi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x9eea7d1d
imul edi
add edx, edi
mov ecx, esi
imul ecx, ecx, 0x111bd1
sar edx, 0x16
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, ecx
mov ecx, dword [0x45b9c0]
sub ebx, eax
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
sar edx, 0x16
add ebx, edx
mov ebp, edx
mov eax, 0x1d74861
imul esi
shr ebp, 0x1f
sar edx, 0xf
add ebp, ebx
mov ecx, edx
shr ecx, 0x1f
add ebp, edx
add esp, 0xc
add ecx, ebp
mov dword [0x45b9b8], ecx
mov dword [esp + 0x10], 0
jmp 0x40d810
mov ecx, dword [0x45b9b8]
mov esi, dword [0x45b9c8]
mov edi, dword [0x45b9b4]
jmp 0x40d810
mov ebx, dword [0x45b9bc]
imul ecx, ecx, 0x533b61
imul edi, edi, 0x1ea3a3
mov eax, 0x96ad8397
imul esi, esi, 0x458786
imul dword [0x45b9ac]
sar edx, 0x14
mov ebp, ebx
imul ebp, ebp, 0x346bb5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, ebp
add eax, ecx
sub eax, edi
mov ebp, eax
mov eax, 0x9eea7d1d
imul ebx
add edx, ebx
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add ebp, edx
add ecx, ebp
lea edx, [esp + 0x18]
add ecx, esi
push 0
push edx
mov dword [0x45b9c0], ecx
call fcn.0042f79d
add esp, 8
cmp eax, 0xffffffff
je 0x40d89b
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileA]
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 0x64
mov dword [esp + 0x10], eax
jl 0x40d7f9
mov ecx, dword [0x45b9bc]
mov esi, dword [0x45b9c4]
mov eax, 0x76294c27
imul esi, esi, 0x346bb5
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, ecx
mov ecx, dword [0x45b9b0]
sub edi, esi
mov esi, dword [str._r_____r____]
mov eax, 0xc4d8f4f
imul esi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x24a6e6
sub edi, eax
sub edi, edx
mov eax, 0x9eea7d1d
imul ecx
mov eax, dword [0x45b9c8]
add edx, ecx
imul eax, eax, 0x458786
sar edx, 0x16
mov ecx, edx
shr ecx, 0x1f
add edi, edx
add ecx, edi
mov edi, dword [esp + 0x320]
add ecx, eax
test edi, edi
mov dword [0x45b9c8], ecx
je 0x40d927
cmp edi, 2
jne 0x40d9fb
mov ebx, dword [sym.imp.KERNEL32.DLL_MoveFileExA]
push 4
lea ecx, [esp + 0x11c]
push ecx
lea edx, [esp + 0x20]
push edx
call ebx
test eax, eax
jne 0x40d9ef
mov ecx, dword [0x45b9ac]
mov edi, dword [0x45b9c0]
mov esi, dword [0x45b9b4]
imul edi, edi, 0x427252
mov eax, 0x7e3fea57
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x7595e9bf
imul esi
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
mov esi, edx
add edi, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
shr esi, 0x1f
sar edx, 0x16
add esi, edi
mov ecx, edx
add esi, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x8b0f0c
shr ecx, 0x1f
add ecx, esi
add ecx, edx
push 6
lea eax, [esp + 0x11c]
mov dword [str._r_____r____], ecx
push eax
lea ecx, [esp + 0x20]
push ecx
call ebx
pop edi
pop esi
pop ebp
mov eax, 0xfffffffe
pop ebx
mov ecx, dword [esp + 0x308]
call fcn.0042f231
add esp, 0x30c
ret
mov ecx, dword [0x45b9c8]
mov esi, dword [str._r_____r____]
mov edx, dword [0x45b9ac]
mov ebx, dword [0x45b9c0]
imul ebx, ebx, 0x427252
mov eax, 0x76294c27
imul edx
sar edx, 0x15
add ebx, edx
mov ebp, edx
mov eax, 0x9eea7d1d
imul esi
add edx, esi
sar edx, 0x16
shr ebp, 0x1f
add ebp, ebx
add ebp, edx
mov ebx, edx
mov eax, 0x9eea7d1d
imul ecx
add edx, ecx
shr ebx, 0x1f
sar edx, 0x16
add ebx, ebp
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
sub eax, esi
add eax, 0x26e3e3
cmp edi, 1
mov dword [0x45b9ac], eax
je 0x40da60
cmp edi, 2
jne 0x40da75
push 0
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x220]
push edx
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x308]
call fcn.0042f231
add esp, 0x30c
ret
mov ecx, dword [esp + 0x318]
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
call fcn.0042f231
add esp, 0x30c
ret