Function at 0x466680
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x274
mov eax, dword [0x5402b0]
xor eax, esp
mov dword [esp + 0x270], eax
push ebx
push esi
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax]
push edi
mov dword [esp + 0x10], esi
call edx
test eax, eax
je 0x4666c7
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x270]
xor ecx, esp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esi + 0x34]
call fcn.0044e7d0
test al, al
jne 0x4666f8
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x270]
xor ecx, esp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x54]
call fcn.0044d670
cmp dword [esp + 0x6c], 8
mov ecx, dword [esp + 0x58]
jae 0x466710
lea ecx, [esp + 0x58]
mov eax, str.9.0.0.100
call fcn.00408470
xor ecx, ecx
test eax, eax
setge cl
xor ebx, ebx
mov edi, 7
mov eax, ecx
mov dword [esp + 0x18], eax
cmp eax, ebx
je 0x4669fa
push 0x206
lea eax, [esp + 0x76]
xor edx, edx
push ebx
push eax
mov word [esp + 0x7c], dx
call fcn.004c5470
add esp, 0xc
lea ecx, [esp + 0x70]
push ecx
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [esp + 0x50], edi
mov dword [esp + 0x34], edi
mov edi, dword [esi + 0x28]
xor edx, edx
xor eax, eax
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], dx
mov dword [esp + 0x30], ebx
mov word [esp + 0x20], ax
cmp edi, dword [esi + 0x2c]
jbe 0x46678b
call fcn.004c237c
mov ebx, dword [esi + 0x1c]
mov edi, edi
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x14], eax
cmp dword [esi + 0x28], eax
jbe 0x4667a1
call fcn.004c237c
mov eax, dword [esi + 0x1c]
test ebx, ebx
je 0x4667ac
cmp ebx, eax
je 0x4667b1
call fcn.004c237c
cmp edi, dword [esp + 0x14]
je 0x4669bb
test ebx, ebx
jne 0x466817
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x4667d0
call fcn.004c237c
lea eax, [esp + 0x70]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4667d7
mov esi, dword [edi]
sub eax, edx
sar eax, 1
push eax
add esi, 0x1c
lea eax, [esp + 0x74]
call fcn.004017f0
test ebx, ebx
jne 0x46681b
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x46680a
call fcn.004c237c
mov eax, dword [edi]
cmp dword [eax + 0x18], 8
jb 0x46681f
mov esi, dword [eax + 4]
jmp 0x466822
mov eax, dword [ebx]
jmp 0x4667c6
mov eax, dword [ebx]
jmp 0x466800
lea esi, [eax + 4]
test ebx, ebx
jne 0x4668ac
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x46683b
call fcn.004c237c
push esi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x466847
sub ecx, esi
sar ecx, 1
push ecx
push eax
mov eax, dword [edi]
add eax, 0x1c
call fcn.0040ba90
test ebx, ebx
jne 0x4668b0
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x466877
call fcn.004c237c
mov ecx, dword [edi]
cmp dword [ecx + 0x38], 0
je 0x46692c
test ebx, ebx
jne 0x4668b4
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x466898
call fcn.004c237c
mov eax, dword [edi]
add eax, 0x1c
mov esi, 8
cmp dword [eax + 0x18], esi
jb 0x4668b8
mov eax, dword [eax + 4]
jmp 0x4668bb
mov eax, dword [ebx]
jmp 0x466831
mov eax, dword [ebx]
jmp 0x46686d
mov eax, dword [ebx]
jmp 0x46688e
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test ebx, ebx
jne 0x4668e6
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x4668d7
call fcn.004c237c
mov eax, dword [edi]
add eax, 0x1c
cmp dword [eax + 0x18], esi
jb 0x4668ea
mov esi, dword [eax + 4]
jmp 0x4668ed
mov eax, dword [ebx]
jmp 0x4668cd
lea esi, [eax + 4]
test ebx, ebx
jne 0x466919
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x466902
call fcn.004c237c
mov eax, dword [edi]
cmp dword [eax + 0x18], 8
jb 0x46691d
mov eax, dword [eax + 4]
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x46698a
mov eax, dword [ebx]
jmp 0x4668f8
push 0
add eax, 4
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x46698a
test ebx, ebx
jne 0x4669ab
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x466941
call fcn.004c237c
mov edx, dword [edi]
mov esi, dword [esp + 0x10]
add edx, 0x1c
push edx
mov ecx, esi
call fcn.00467100
test ebx, ebx
jne 0x4669af
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x466967
call fcn.004c237c
test ebx, ebx
jne 0x4669b3
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x46697c
call fcn.004c237c
mov eax, dword [edi]
lea ecx, [eax + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00466eb0
test ebx, ebx
jne 0x4669b7
call fcn.004c237c
xor eax, eax
cmp edi, dword [eax + 0x10]
jb 0x46699f
call fcn.004c237c
mov esi, dword [esp + 0x10]
add edi, 4
jmp 0x466790
mov eax, dword [ebx]
jmp 0x466937
mov eax, dword [ebx]
jmp 0x46695d
mov eax, dword [ebx]
jmp 0x466972
mov eax, dword [ebx]
jmp 0x466995
cmp dword [esp + 0x34], 8
jb 0x4669cf
mov edx, dword [esp + 0x20]
push edx
call fcn.004c097a
add esp, 4
xor eax, eax
cmp dword [esp + 0x50], 8
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
jb 0x4669fa
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004c097a
add esp, 4
add esi, 0x34
push 1
mov ecx, esi
call fcn.0044e5e0
movzx eax, al
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
jne 0x466a32
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
mov ecx, esi
call fcn.0044e5e0
movzx edx, al
add esp, 4
mov dword [esp + 0x14], edx
cmp dword [esp + 0x18], 0
je 0x466ce3
xor eax, eax
mov word [esp + 0x3c], ax
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x28]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], 0
cmp esi, dword [eax + 0x2c]
jbe 0x466a65
call fcn.004c237c
mov edi, dword [esp + 0x10]
mov ebx, dword [edi + 0x1c]
lea esp, [esp]
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x18], eax
cmp dword [edi + 0x28], eax
jbe 0x466a81
call fcn.004c237c
mov edi, dword [edi + 0x1c]
test ebx, ebx
je 0x466a8c
cmp ebx, edi
je 0x466a91
call fcn.004c237c
cmp esi, dword [esp + 0x18]
je 0x466ccf
test ebx, ebx
jne 0x466b51
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466ab4
call fcn.004c237c
mov ecx, dword [esi]
cmp dword [ecx + 0x38], 0
je 0x466c15
test ebx, ebx
jne 0x466b58
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466ad9
call fcn.004c237c
mov edx, dword [esi]
push 0x51bcf8
push edx
mov edi, 1
call fcn.0040bd50
mov edi, eax
test ebx, ebx
jne 0x466b5f
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466b02
call fcn.004c237c
mov eax, dword [esi]
xor ecx, ecx
push edi
push ecx
push eax
lea eax, [esp + 0x28]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], 0
mov word [esp + 0x2c], cx
call fcn.004018f0
lea edi, [esp + 0x1c]
call fcn.00466d40
test eax, eax
jne 0x466b63
cmp dword [esp + 0x34], 8
jb 0x466c97
mov edx, dword [esp + 0x20]
push edx
call fcn.004c097a
add esp, 4
jmp 0x466c97
mov eax, dword [ebx]
jmp 0x466aaa
mov eax, dword [ebx]
jmp 0x466acf
mov eax, dword [ebx]
jmp 0x466af8
test ebx, ebx
jne 0x466b85
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466b78
call fcn.004c237c
mov eax, dword [esi]
cmp dword [eax + 0x18], 8
jb 0x466b89
mov edi, dword [eax + 4]
jmp 0x466b8c
mov eax, dword [ebx]
jmp 0x466b6e
lea edi, [eax + 4]
test ebx, ebx
jne 0x466bb1
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466ba1
call fcn.004c237c
mov eax, dword [esi]
add eax, 0x1c
cmp dword [eax + 0x18], 8
jb 0x466bb5
mov eax, dword [eax + 4]
jmp 0x466bb8
mov eax, dword [ebx]
jmp 0x466b97
add eax, 4
push 0
push edi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test ebx, ebx
jne 0x466beb
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466bd7
call fcn.004c237c
mov eax, dword [esi]
add eax, 0x1c
mov edi, 8
cmp dword [eax + 0x18], edi
jb 0x466bef
mov eax, dword [eax + 4]
jmp 0x466bf2
mov eax, dword [ebx]
jmp 0x466bcd
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esp + 0x34], edi
jb 0x466c97
mov eax, dword [esp + 0x20]
push eax
call fcn.004c097a
add esp, 4
jmp 0x466c97
test ebx, ebx
jne 0x466cb8
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466c2e
call fcn.004c237c
mov edi, dword [esi]
call fcn.00466d40
test ebx, ebx
jne 0x466cbf
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466c4e
call fcn.004c237c
test ebx, ebx
jne 0x466cc3
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466c63
call fcn.004c237c
mov eax, dword [esi]
mov edi, dword [esp + 0x10]
push eax
add eax, 0x1c
push eax
mov ecx, edi
call fcn.00466eb0
test ebx, ebx
jne 0x466cc7
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466c8a
call fcn.004c237c
mov ecx, dword [esi]
add ecx, 0x1c
push ecx
mov ecx, edi
call fcn.00467100
test ebx, ebx
jne 0x466ccb
call fcn.004c237c
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x466cac
call fcn.004c237c
mov edi, dword [esp + 0x10]
add esi, 4
jmp 0x466a70
mov eax, dword [ebx]
jmp 0x466c24
mov eax, dword [ebx]
jmp 0x466c44
mov eax, dword [ebx]
jmp 0x466c59
mov eax, dword [ebx]
jmp 0x466c80
mov eax, dword [ebx]
jmp 0x466ca2
cmp dword [esp + 0x50], 8
jb 0x466ce3
mov edx, dword [esp + 0x3c]
push edx
call fcn.004c097a
add esp, 4
push 0x523d90
call fcn.00408860
add esp, 4
push 0x523d98
call fcn.00408860
add esp, 4
push 0x22
call fcn.00409e20
add esp, 4
cmp dword [esp + 0x6c], 8
jb 0x466d1b
mov eax, dword [esp + 0x58]
push eax
call fcn.004c097a
add esp, 4
mov ecx, dword [esp + 0x27c]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004c0985
mov esp, ebp
pop ebp
ret