Function at 0x41cd90
Capabilities:
Copy file
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x4e3320
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov ebx, 1
mov dword [esp + 0x48], ebx
sub esp, 8
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
xor edi, edi
call fcn.004176e0
mov byte [esp + 0x50], 2
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x54], bl
call fcn.0041c210
mov byte [esp + 0x54], 3
add esp, 4
lea edx, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004176e0
mov byte [esp + 0x50], 4
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x54], 3
call fcn.0041bba0
add esp, 0xc
mov byte [esp + 0x48], 5
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x2c]
call fcn.004176e0
mov byte [esp + 0x48], 6
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4e9fdc
call fcn.00418470
mov byte [esp + 0x54], 7
push ebx
sub esp, 8
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004176e0
mov byte [esp + 0x60], 8
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x64], 6
call fcn.0041ca00
mov byte [esp + 0x64], 9
add esp, 0x14
mov esi, esp
mov dword [esp + 0x1c], esp
sub esp, 8
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.004176e0
mov byte [esp + 0x58], 0xa
push esi
mov byte [esp + 0x5c], 9
call fcn.0041bba0
mov byte [esp + 0x5c], 0xb
add esp, 4
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004176e0
mov byte [esp + 0x58], 0xc
sub esp, 8
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x4e88c0
call fcn.00418470
mov byte [esp + 0x60], 0xd
sub esp, 8
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.004176e0
mov byte [esp + 0x68], 0xe
mov byte [esp + 0x68], 9
mov ecx, dword [esp + 0x80]
call fcn.0044d680
test eax, eax
jne 0x41cf63
mov byte [esp + 0x48], 6
lea ecx, [esp + 0x20]
call fcn.00417490
mov byte [esp + 0x48], 5
lea ecx, [esp + 0x28]
call fcn.00417490
mov byte [esp + 0x48], 3
lea ecx, [esp + 0x38]
call fcn.00417490
mov byte [esp + 0x48], bl
lea ecx, [esp + 0x30]
call fcn.00417490
mov byte [esp + 0x48], 0
lea ecx, [esp + 0x58]
call fcn.00417490
mov dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.00417490
xor eax, eax
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov eax, dword [esp + 0x28]
cmp dword [eax - 4], ebx
jle 0x41cf7d
mov eax, dword [eax - 0xc]
push eax
lea ecx, [esp + 0x2c]
call fcn.00401370
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x54]
push esi
push eax
call fcn.0041b7c0
mov ebp, eax
mov eax, dword [esp + 0x28]
add esp, 8
cmp dword [eax - 4], ebx
jle 0x41cfa7
mov ecx, dword [eax - 0xc]
push ecx
lea ecx, [esp + 0x24]
call fcn.00401370
mov eax, dword [esp + 0x20]
push esi
push eax
call fcn.0041b7c0
mov edx, dword [esp + 0x28]
mov esi, eax
mov eax, dword [esp + 0x30]
push edx
push eax
call fcn.0047befd
add esp, 0x10
test eax, eax
jne 0x41cff9
test byte [esp + 0x6c], 2
je 0x41cff2
sub esp, 8
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004176e0
mov byte [esp + 0x50], 0xf
mov byte [esp + 0x50], 9
call fcn.0041ba30
add esp, 8
mov edi, ebx
jmp 0x41d0ee
mov ebx, dword [esp + 0x6c]
cmp esi, ebp
ja 0x41d01a
test bl, 1
je 0x41d00a
cmp esi, ebp
je 0x41d01a
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41d0ee
mov esi, ebx
and esi, 2
je 0x41d046
sub esp, 8
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004176e0
mov byte [esp + 0x50], 0x10
mov byte [esp + 0x50], 9
call fcn.0041baa0
add esp, 8
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x41d085
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test esi, esi
je 0x41d0b3
sub esp, 8
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004176e0
mov byte [esp + 0x50], 0x11
jmp 0x41d0a6
test bl, 4
je 0x41d0ba
test esi, esi
je 0x41d0b3
sub esp, 8
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004176e0
mov byte [esp + 0x50], 0x12
mov byte [esp + 0x50], 9
call fcn.0041ba30
add esp, 8
mov edi, 1
jmp 0x41d0ee
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test esi, esi
je 0x41d0ee
sub esp, 8
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004176e0
mov byte [esp + 0x50], 0x13
mov byte [esp + 0x50], 9
call fcn.0041ba30
add esp, 8
mov byte [esp + 0x48], 6
lea ecx, [esp + 0x20]
call fcn.00417490
mov byte [esp + 0x48], 5
lea ecx, [esp + 0x28]
call fcn.00417490
mov byte [esp + 0x48], 3
lea ecx, [esp + 0x38]
call fcn.00417490
mov byte [esp + 0x48], 1
lea ecx, [esp + 0x30]
call fcn.00417490
mov byte [esp + 0x48], 0
lea ecx, [esp + 0x58]
call fcn.00417490
mov dword [esp + 0x48], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.00417490
mov ecx, dword [esp + 0x40]
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x3c
ret