Function at 0xdc9810
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x25
push 0
push 0
dec ecx
jne 0xdc9818
push ecx
push ebx
push esi
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0xdca3bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x11], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x998]
call fcn.00c7bc6c
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0xdca374
lea edx, [ebp - 0x34]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.00419578
push dword [ebp - 0x30]
push 0xdca3dc
push 0xdca3f4
lea eax, [ebp - 8]
mov edx, 3
call fcn.004087e8
mov eax, dword [ebp - 8]
call fcn.00418f30
test al, al
jne 0xdc98d4
push 0x10
push 0xdca404
push 0xdca430
push dword [ebp - 8]
push 0xdca458
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.004087e8
mov eax, dword [ebp - 0x38]
call fcn.004082ac
push eax
mov eax, dword [0xe3658c]
mov eax, dword [eax]
mov eax, dword [eax + 0x170]
push eax
call sub.user32.dll_MessageBoxW
jmp 0xdca374
mov dl, 1
mov eax, dword [0xd36770]
call fcn.00d38ed0
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x438dfc]
call fcn.00446110
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x438dfc]
call fcn.00446110
mov dword [ebp - 0x28], eax
xor eax, eax
push ebp
push 0xdca36d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
call fcn.00d38f3c
mov eax, dword [ebp - 0x18]
cmp dword [eax + 8], 0
jne 0xdc9950
lea edx, [ebp - 0x40]
mov eax, dword [0xe3668c]
mov eax, dword [eax]
mov eax, dword [eax + 0x68]
mov eax, dword [eax + 0x58]
call fcn.0041984c
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x3c]
xor edx, edx
call fcn.004194a4
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
add eax, 8
call fcn.00408220
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.00dba994
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x998]
call fcn.00c7fac4
mov edx, dword [eax]
call dword [edx + 0x2c]
inc eax
jle 0xdc999f
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x998]
mov eax, ebx
call fcn.00c7fac4
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
mov eax, ebx
call fcn.00d5b39c
mov edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov eax, dword [eax + 8]
call fcn.00441dc0
push 0xdca4e4
push 0xdca50c
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0x48]
mov eax, dword [0xe35860]
call fcn.0040bce8
mov edx, dword [ebp - 0x48]
mov ecx, 0xdca524
mov eax, 0xdca54c
call fcn.00a07734
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.00d3740c
dec eax
sete byte [ebp - 0x11]
cmp byte [ebp - 0x11], 0
jne 0xdc99ef
call fcn.00406844
jmp 0xdca374
mov eax, dword [ebp - 0x18]
call fcn.00d39070
mov eax, dword [0xe36c5c]
mov eax, dword [eax]
movzx eax, word [eax + 0x48]
mov word [ebp - 0x1e], ax
mov eax, dword [0xe36c5c]
mov eax, dword [eax]
mov dx, 0xfff5
call fcn.005a7da8
mov dl, 1
mov eax, dword [0x438dfc]
call fcn.00446110
mov dword [ebp - 0x24], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0xa089c8]
call fcn.0059ffbc
mov edx, dword [0xe36bcc]
mov dword [edx], eax
xor eax, eax
push ebp
push 0xdca340
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0x11
lea edx, [ebp - 0x54]
xor ecx, ecx
mov eax, 0xdca568
call fcn.0041aa40
mov edx, dword [ebp - 0x4c]
mov eax, dword [0xe36bcc]
mov eax, dword [eax]
call fcn.00a08e5c
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005aa860
lea eax, [ebp - 0x5c]
call fcn.008c43f8
push dword [ebp - 0x5c]
push 0xdca59c
call sub.KERNEL32.DLL_GetTickCount_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x60]
call fcn.00418860
push dword [ebp - 0x60]
lea eax, [ebp - 0x58]
mov edx, 3
call fcn.004087e8
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 4]
call fcn.008c66a4
lea eax, [ebp - 0x64]
mov ecx, 0xdca5bc
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x64]
call fcn.00404890
call fcn.0040475c
lea eax, [ebp - 0x68]
mov ecx, 0xdca5dc
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x68]
call fcn.00404890
call fcn.0040475c
lea eax, [ebp - 0x6c]
mov ecx, 0xdca5f4
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x6c]
call fcn.00404890
call fcn.0040475c
lea eax, [ebp - 0x70]
mov ecx, 0xdca618
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x70]
call fcn.00404890
call fcn.0040475c
lea eax, [ebp - 0x74]
mov ecx, 0xdca640
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x74]
call fcn.00404890
call fcn.0040475c
push 0
lea eax, [ebp - 0x78]
mov ecx, 0xdca668
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x78]
call fcn.004082ac
push eax
lea edx, [ebp - 0x80]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x7c]
call fcn.00419578
lea eax, [ebp - 0x7c]
mov edx, 0xdca688
call fcn.00408644
mov eax, dword [ebp - 0x7c]
call fcn.004082ac
push eax
call sub.KERNEL32.DLL_CopyFileW
push 0
lea eax, [ebp - 0x84]
mov ecx, 0xdca6b0
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0x84]
call fcn.004082ac
push eax
lea edx, [ebp - 0x8c]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x88]
call fcn.00419578
lea eax, [ebp - 0x88]
mov edx, 0xdca6ec
call fcn.00408644
mov eax, dword [ebp - 0x88]
call fcn.004082ac
push eax
call sub.KERNEL32.DLL_CopyFileW
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.00418f30
test al, al
je 0xdc9d83
push 0
push dword [ebp - 4]
push 0xdca720
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.0041988c
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x94]
call fcn.00417440
push dword [ebp - 0x94]
lea eax, [ebp - 0x90]
mov edx, 3
call fcn.004087e8
mov eax, dword [ebp - 0x90]
call fcn.004082ac
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.004082ac
push eax
call sub.KERNEL32.DLL_CopyFileW
mov dl, 1
mov eax, dword [0x438dfc]
call fcn.00446110
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0xdc9d7c
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xa0]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.00419578
lea eax, [ebp - 0x9c]
mov edx, 0xdca754
call fcn.00408644
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
movzx eax, byte [0xdca774]
push eax
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0xa8]
push eax
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.0041988c
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 0xac]
call fcn.00417440
mov ecx, dword [ebp - 0xac]
mov edx, 0xdca784
pop eax
call fcn.00421b44
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
call fcn.00425ad8
push eax
lea eax, [ebp - 0xb4]
mov ecx, 0xdca79c
mov edx, dword [ebp - 4]
call fcn.00408704
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x2c]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x80]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xdc9d83
mov eax, dword [ebp - 0x2c]
call fcn.00405bb4
ret
push 5
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0xdca7cc
mov edx, dword [ebp - 4]
call fcn.00408704
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x10]
call fcn.00da32a0
mov eax, dword [0xe36bcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x38c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005aa860
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.00418f30
test al, al
je 0xdc9e54
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.0041988c
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0xc0]
call fcn.00417440
mov ecx, dword [ebp - 0xc0]
lea eax, [ebp - 0xbc]
mov edx, 0xdca7f0
call fcn.00408704
mov eax, dword [ebp - 0xbc]
push eax
push 7
lea eax, [ebp - 0xc8]
mov ecx, 0xdca808
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x10]
call fcn.00da5190
jmp 0xdc9e8a
push 0
push 7
lea eax, [ebp - 0xcc]
mov ecx, 0xdca808
mov edx, dword [ebp - 4]
call fcn.00408704
mov eax, dword [ebp - 0xcc]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x10]
call fcn.00da5190
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
call fcn.00418f30
test al, al
je 0xdc9eaa
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
call fcn.004082ac
push eax
call sub.KERNEL32.DLL_DeleteFileW
lea eax, [ebp - 0xc]
call fcn.00419dbc
xor eax, eax
push ebp
push 0xdca117
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00419dc8
lea edx, [ebp - 0xd4]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0xd0]
call fcn.00419578
push dword [ebp - 0xd0]
push 0xdca3dc
push 0xdca824
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
push 0xdca84c
lea eax, [ebp - 8]
mov edx, 5
call fcn.004087e8
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0x11
lea edx, [ebp - 0x54]
xor ecx, ecx
mov eax, 0xdca870
call fcn.0041aa40
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0xdc]
call fcn.008c43f8
lea eax, [ebp - 0xdc]
mov edx, 0xdca894
call fcn.00408644
mov ecx, dword [ebp - 0xdc]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.008c4b70
mov ebx, eax
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xf0], ebx
mov byte [ebp - 0xec], 0
lea eax, [ebp - 0xf4]
call fcn.008c43f8
lea eax, [ebp - 0xf4]
mov edx, 0xdca894
call fcn.00408644
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0xe4], 0x11
lea edx, [ebp - 0xf0]
mov ecx, 1
mov eax, 0xdca8bc
call fcn.0041aa40
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0xfc]
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005ab3d4
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0xf8]
call fcn.00419578
push dword [ebp - 0xf8]
push 0xdca3dc
push 0xdca908
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
push 0xdca938
lea eax, [ebp - 8]
mov edx, 5
call fcn.004087e8
lea eax, [ebp - 0x100]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0x11
lea edx, [ebp - 0x54]
xor ecx, ecx
mov eax, 0xdca870
call fcn.0041aa40
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x104]
call fcn.008c43f8
lea eax, [ebp - 0x104]
mov edx, 0xdca94c
call fcn.00408644
mov ecx, dword [ebp - 0x104]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.008c4b70
mov ebx, eax
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0xf0], ebx
mov byte [ebp - 0xec], 0
lea eax, [ebp - 0x10c]
call fcn.008c43f8
lea eax, [ebp - 0x10c]
mov edx, 0xdca94c
call fcn.00408644
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 0xe4], 0x11
lea edx, [ebp - 0xf0]
mov ecx, 1
mov eax, 0xdca8bc
call fcn.0041aa40
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0xe36bcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x390]
mov edx, 0x64
call fcn.0053c78c
mov eax, dword [0xe3658c]
mov eax, dword [eax]
call fcn.005aa860
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xdca11e
mov eax, dword [ebp - 0xc]
call fcn.00419dc8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xdca3c3
lea eax, [ebp - 0x12c]
mov edx, 0xf
call fcn.00408218
lea eax, [ebp - 0xe0]
mov edx, 0x23
call fcn.00408218
lea eax, [ebp - 0x4c]
mov edx, 8
call fcn.00408218
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00408218
ret