Function at 0x40336e
Capabilities:
Copy file
Create process on windows
Create thread
Delete file
Move file
Set file attributes
Terminate process

Disassembly:
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x5a8514], eax
call sub.COMCTL32.DLL_InitCommonControls
push 0
push 1
push dword [0x5a8514]
call fcn.0046d2ff
push 0
push 0x40336e
push 0
push 0x3e8
push dword [0x5a8514]
call sub.USER32.DLL_DialogBoxParamA
push 0
push 0
push dword [0x5a8514]
call fcn.0046d2ff
push 0
call sub.KERNEL32.DLL_ExitProcess
push ebp
mov ebp, esp
push esi
push edi
mov eax, dword [ebp + 0xc]
cmp eax, 0x110
jne 0x4035d3
push 0x57fe41
call fcn.00404724
push eax
push 0
push 0x172
push 0x3eb
push dword [ebp + 8]
call sub.USER32.DLL_SendDlgItemMessageA
push 0x3eb
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
mov dword [0x57665b], eax
push 0x64
push 0x37
push 0xe1
push 0
push 0
push eax
push 0x5a8578
call fcn.00403e50
push 0x1f4
push dword [0x5a8578]
call fcn.00404624
push 0xff9933
push dword [0x5a8578]
call fcn.0040460c
push 0
push 0xc8
push 1
push dword [ebp + 8]
call sub.USER32.DLL_SetTimer
push dword [0x5751be]
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c2], eax
push dword [0x5751ca]
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751ce], eax
push 1
push 0x3e9
push dword [ebp + 8]
call sub.USER32.DLL_CheckDlgButton
push dword [ebp + 8]
call sub.USER32.DLL_SetForegroundWindow
push 0x57fe45
push 0x3ee
push dword [ebp + 8]
call sub.USER32.DLL_SetDlgItemTextA
push 0x67
push dword [0x5a8514]
call sub.USER32.DLL_LoadCursorA
mov dword [0x5a8518], eax
push 0x3ee
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3f0
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3f1
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3ea
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3e9
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3f6
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3e8
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0x3ef
push dword [ebp + 8]
call sub.USER32.DLL_GetDlgItem
push eax
push 0x403da0
push 0xfffffffffffffffc
push eax
call sub.USER32.DLL_SetWindowLongA
pop edx
push eax
push 0xffffffffffffffeb
push edx
call sub.USER32.DLL_SetWindowLongA
push 0
push 1
push dword [0x5a8514]
call fcn.0058bd1c
push 0
push 0xac44
push 0xffffffffffffffff
call fcn.00580309
push 0x506
push 0
push 0
push 0x576a99
push 1
call fcn.00587fd6
call fcn.0058b47f
push 0x576657
push 0x57fe7c
push 0x57fe4e
push 0x80000002
call fcn.00403c15
jmp 0x403b3f
cmp eax, 0x113
jne 0x4035fe
mov eax, 0x403ddc
push 0x5a8510
push 0
push dword [ebp + 8]
push eax
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
push eax
call sub.KERNEL32.DLL_CloseHandle
jmp 0x403b3f
cmp eax, 0x111
jne 0x40394b
mov eax, dword [ebp + 0x10]
cmp eax, 0x3ee
jne 0x403893
push dword [ebp + 8]
call fcn.00403b47
push 0x575a27
call fcn.004046f0
cmp eax, 1
jne 0x40363d
push 0x576247
push 0x575a27
call sub.KERNEL32.DLL_MoveFileA
push 0x3ea
push dword [ebp + 8]
call sub.USER32.DLL_IsDlgButtonChecked
cmp eax, 1
jne 0x40365a
mov word [0x575000], 0x33
jmp 0x403663
mov word [0x575000], 0x32
call fcn.00402e00
cmp dword [0x576657], 0xa
jne 0x403849
push 0x5751d2
call fcn.004046f0
cmp eax, 0
je 0x403781
push 0
push 0x5751dd
push 0x5751d2
call sub.KERNEL32.DLL_CopyFileA
push 6
push 0x5751dd
call sub.KERNEL32.DLL_SetFileAttributesA
push 0x5751d2
call sub.KERNEL32.DLL_LoadLibraryA
cmp eax, 0
je 0x4036cb
push eax
call sub.KERNEL32.DLL_FreeLibrary
push 0x5751d2
call fcn.004030d3
cmp eax, 1
je 0x40371c
jmp 0x4036da
push 0x5751d2
call fcn.00403184
cmp eax, 1
je 0x40371c
push 0x80
push 0x5751dd
call sub.KERNEL32.DLL_SetFileAttributesA
push 0
push 0x5751d2
push 0x5751dd
call sub.KERNEL32.DLL_CopyFileA
push 0x5751dd
call sub.KERNEL32.DLL_DeleteFileA
push 0x10
push 0x57feac
push 0x57fe98
push 0
call sub.USER32.DLL_MessageBoxA
jmp 0x40388e
push 0x3e9
push dword [ebp + 8]
call sub.USER32.DLL_IsDlgButtonChecked
cmp eax, 1
jne 0x4037a8
push 0x57fec0
call fcn.004046f0
cmp eax, 0
je 0x403781
push 0x576247
call sub.KERNEL32.DLL_DeleteFileA
push 0
push 0x57fef8
push 0x57fecc
push 0x80000001
call fcn.00403c76
push 0x5a851c
push 0x5a852c
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x57ff08
call sub.KERNEL32.DLL_CreateProcessA
jmp 0x4037a6
call fcn.00403d61
push dword [ebp + 8]
call fcn.00403d2f
push 0x10
push 0x57ff50
push 0x57ff14
push 0
call sub.USER32.DLL_MessageBoxA
jmp 0x40388e
jmp 0x403825
push 0x57ff64
call fcn.004046f0
cmp eax, 0
je 0x403803
push dword [ebp + 8]
call fcn.00403cf8
mov dword [0x5a8574], 1
push 0
push 0x57ffa0
push 0x57ff70
push 0x80000001
call fcn.00403c76
push 0x5a851c
push 0x5a852c
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x57ffb0
call sub.KERNEL32.DLL_CreateProcessA
jmp 0x403825
call fcn.00403d61
push dword [ebp + 8]
call fcn.00403d2f
push 0x10
push 0x57fff8
push 0x57ffbc
push 0
call sub.USER32.DLL_MessageBoxA
jmp 0x40388e
push 0xffffffffffffffff
push dword [0x5a851c]
call sub.USER32.DLL_WaitForInputIdle
push 0x190
call sub.KERNEL32.DLL_Sleep
push 0
push dword [0x5a851c]
call sub.KERNEL32.DLL_TerminateProcess
push 0x3ea
push dword [ebp + 8]
call sub.USER32.DLL_IsDlgButtonChecked
cmp eax, 1
jne 0x403876
cmp dword [0x5a8574], 1
je 0x40386c
push dword [ebp + 8]
call fcn.00403cf8
mov dword [0x5a8574], 0
call fcn.00403d61
push 0x40
push 0x58001c
push 0x58000c
push 0
call sub.USER32.DLL_MessageBoxA
jmp 0x403946
cmp eax, 0x3f6
jne 0x4038a9
push 0
push dword [ebp + 8]
call sub.USER32.DLL_EndDialog
jmp 0x403946
cmp eax, 0x3ef
jne 0x4038fa
push 0x576a7d
push 0x576a73
push 0
push dword [ebp + 8]
call fcn.00404680
mov ebx, eax
push eax
push 0x576663
call sub.KERNEL32.DLL_lstrcpyA
push 0x576663
call sub.KERNEL32.DLL_lstrlenA
mov dword [eax + 0x57665f], 0x6b61622e
push 0
push 0x576663
push ebx
call sub.KERNEL32.DLL_CopyFileA
push ebx
call fcn.00403240
jmp 0x403946
cmp eax, 0x3f0
jne 0x403921
push 1
push 0x3e9
push dword [ebp + 8]
call sub.USER32.DLL_CheckDlgButton
push 0
push 0x3ea
push dword [ebp + 8]
call sub.USER32.DLL_CheckDlgButton
jmp 0x403946
cmp eax, 0x3f1
jne 0x403946
push 1
push 0x3ea
push dword [ebp + 8]
call sub.USER32.DLL_CheckDlgButton
push 0
push 0x3e9
push dword [ebp + 8]
call sub.USER32.DLL_CheckDlgButton
jmp 0x403b3f
cmp eax, 0x201
jne 0x40396a
mov eax, dword [ebp + 0x14]
push eax
push 2
push 0xa1
push dword [ebp + 8]
call sub.USER32.DLL_PostMessageA
jmp 0x403b3f
cmp eax, 0x136
je 0x4039a1
cmp eax, 0x133
je 0x4039a1
cmp eax, 0x138
je 0x4039a1
cmp dword [ebp + 0xc], 0x135
je 0x4039a1
cmp eax, 0x134
je 0x4039a1
cmp eax, 0x137
je 0x4039a1
cmp eax, 0x132
jne 0x403b1a
push 0xfffffffffffffff4
push dword [ebp + 0x14]
call sub.USER32.DLL_GetWindowLongA
cmp eax, 0x3ed
jne 0x4039f7
cmp dword [0x5751c6], 0
je 0x4039c6
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push 1
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetBkMode
push 0xff
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetTextColor
push 0x6c0000
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c6], eax
pop edi
pop esi
pop ebp
ret 0x10
cmp eax, 0x3ec
jne 0x403a43
cmp dword [0x5751c6], 0
je 0x403a12
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push 1
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetBkMode
push 0xff00
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetTextColor
push 0x6c0000
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c6], eax
pop edi
pop esi
pop ebp
ret 0x10
cmp eax, 0x44d
jne 0x403a75
cmp dword [0x5751c6], 0
je 0x403a5e
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push 0xff8000
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c6], eax
pop edi
pop esi
pop ebp
ret 0x10
cmp eax, 0x3f6
jne 0x403ab1
cmp dword [0x5751c6], 0
je 0x403a90
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push 1
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetBkMode
push 0xff0000
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c6], eax
pop edi
pop esi
pop ebp
ret 0x10
cmp eax, 0x3eb
jne 0x403af1
cmp dword [0x5751c6], 0
je 0x403acc
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push 1
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetBkMode
mov eax, dword [0x5a8570]
xor eax, 0x6c0000
push eax
call sub.GDI32.DLL_CreateSolidBrush
mov dword [0x5751c6], eax
pop edi
pop esi
pop ebp
ret 0x10
push dword [0x5751be]
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetTextColor
push dword [0x5751ca]
push dword [ebp + 0x10]
call sub.GDI32.DLL_SetBkColor
mov eax, dword [0x5751ce]
pop edi
pop esi
pop ebp
ret 0x10
cmp eax, 0x10
jne 0x403b3f
push 0xc8
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
push dword [0x5751c6]
call sub.GDI32.DLL_DeleteObject
push dword [ebp + 8]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
pop edi
pop esi
pop ebp
ret 0x10