Function at 0x4068e8
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6c
push 0
push 0
dec ecx
jne 0x4068f0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00402ac0
xor eax, eax
push ebp
push 0x406d23
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
mov edx, 0x406d3c
call fcn.004026f4
lea eax, [ebp - 0xc]
mov edx, 0x406d50
call fcn.004026f4
lea eax, [ebp - 0x18]
mov edx, 0x406d6c
call fcn.004026f4
lea eax, [ebp - 0x14]
mov edx, 0x406d84
call fcn.004026f4
lea eax, [ebp - 0x1c]
mov edx, 0x406d9c
call fcn.004026f4
mov edi, 0x80
lea eax, [ebp - 8]
xor edx, edx
call fcn.00402c58
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x170]
call fcn.004017a0
mov eax, dword [0x40b308]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x170]
call fcn.00401b20
call fcn.004012d8
test eax, eax
jne 0x406cf8
lea eax, [ebp - 0x170]
call fcn.00401990
mov edx, eax
lea eax, [ebp - 8]
call fcn.00402c58
push 0
lea eax, [ebp - 0x170]
call fcn.00401990
push eax
lea eax, [ebp - 8]
call fcn.00402b24
mov edx, eax
lea eax, [ebp - 0x170]
pop ecx
call fcn.004018f8
lea eax, [ebp - 0x170]
call fcn.00401938
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 8]
call fcn.004026f4
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 8]
call fcn.004026f4
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp - 0x20]
call fcn.004028d8
push eax
mov eax, dword [ebp - 0x20]
call fcn.004028d8
mov edx, eax
sub edx, edi
inc edx
mov eax, dword [ebp - 0x20]
pop ecx
call fcn.00402b2c
mov ecx, dword [ebp - 0x340]
lea eax, [ebp - 0x20]
mov edx, 0x406dac
call fcn.00402924
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x20]
call fcn.004028d8
mov ecx, eax
mov edx, 2
mov eax, dword [ebp - 0x20]
call fcn.00402b2c
lea eax, [ebp - 0x344]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00402b2c
mov eax, dword [ebp - 0x344]
mov edx, 0x406db8
call fcn.00402a1c
je 0x406a92
lea eax, [ebp - 0x348]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00402b2c
cmp dword [ebp - 0x348], 0
jne 0x406a2a
cmp dword [ebp - 0x20], 0
je 0x406cf8
inc dword [0x40b2c0]
mov eax, dword [ebp - 0x20]
call fcn.004028d8
mov esi, eax
sub esi, 2
test esi, esi
jle 0x406ada
mov ebx, 1
lea eax, [ebp - 0x20]
mov ecx, 1
mov edx, ebx
call fcn.00402b6c
lea edx, [ebp - 0x20]
mov ecx, ebx
mov eax, 0x406dc4
call fcn.00402bb4
inc ebx
dec esi
jne 0x406ab8
lea eax, [ebp - 0x20]
mov ecx, 3
mov edx, 1
call fcn.00402b6c
lea edx, [ebp - 0x20]
mov ecx, 1
mov eax, 0x406db8
call fcn.00402bb4
mov eax, dword [ebp - 0xc]
call fcn.004028d8
mov ecx, eax
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00402b6c
lea edx, [ebp - 0x20]
mov ecx, 4
mov eax, dword [ebp - 0xc]
call fcn.00402bb4
mov eax, dword [ebp - 0x18]
call fcn.004028d8
mov ecx, eax
lea eax, [ebp - 0x20]
mov edx, 0x22
call fcn.00402b6c
lea edx, [ebp - 0x20]
mov ecx, 0x22
mov eax, dword [ebp - 0x10]
call fcn.00402bb4
mov eax, dword [ebp - 0x10]
call fcn.004028d8
mov ecx, eax
lea eax, [ebp - 0x20]
mov edx, 0x40
call fcn.00402b6c
lea edx, [ebp - 0x20]
mov ecx, 0x40
mov eax, dword [ebp - 0x18]
call fcn.00402bb4
lea eax, [ebp - 0x34c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
call fcn.00402924
mov eax, dword [ebp - 0x34c]
call fcn.004028d8
mov ecx, eax
lea eax, [ebp - 0x20]
mov edx, 0x5e
call fcn.00402b6c
lea eax, [ebp - 0x350]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
call fcn.00402924
mov eax, dword [ebp - 0x350]
lea edx, [ebp - 0x20]
mov ecx, 0x5e
call fcn.00402bb4
lea eax, [ebp - 0x354]
push eax
mov eax, dword [ebp - 0x24]
call fcn.004028d8
mov ecx, eax
sub ecx, edi
mov edx, 1
mov eax, dword [ebp - 0x24]
call fcn.00402b2c
mov edx, dword [ebp - 0x354]
lea eax, [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
call fcn.00402924
lea eax, [ebp - 0x358]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x24]
call fcn.00402b2c
mov eax, dword [ebp - 0x358]
mov edx, 0x406dd0
call fcn.00402a1c
jne 0x406c39
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x24]
call fcn.004028d8
mov ecx, eax
mov edx, 2
mov eax, dword [ebp - 0x24]
call fcn.00402b2c
lea eax, [ebp - 0x35c]
mov ecx, 0x406ddc
mov edx, dword [ebp - 4]
call fcn.00402924
mov edx, dword [ebp - 0x35c]
lea eax, [ebp - 0x33c]
call fcn.004017a0
lea eax, [ebp - 0x33c]
call fcn.0040153c
call fcn.0040129c
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x33c]
call fcn.00402cbc
call fcn.00401850
call fcn.0040129c
lea eax, [ebp - 0x33c]
call fcn.00401938
call fcn.0040129c
mov eax, dword [ebp - 4]
call fcn.00402ad0
mov ebx, eax
push ebx
call sub.kernel32.dll_DeleteFileA
test eax, eax
je 0x406cf8
push 0
push ebx
lea eax, [ebp - 0x360]
mov ecx, 0x406ddc
mov edx, dword [ebp - 4]
call fcn.00402924
mov eax, dword [ebp - 0x360]
call fcn.00402ad0
push eax
call sub.kernel32.dll_CopyFileA
test eax, eax
je 0x406cf8
lea eax, [ebp - 0x364]
mov ecx, 0x406ddc
mov edx, dword [ebp - 4]
call fcn.00402924
mov eax, dword [ebp - 0x364]
call fcn.00402ad0
push eax
call sub.kernel32.dll_DeleteFileA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x406d2a
lea eax, [ebp - 0x364]
mov edx, 0xa
call fcn.00402680
lea eax, [ebp - 0x24]
mov edx, 9
call fcn.00402680
ret