Function at 0x40bd30
Capabilities:
Copy file
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x42a96a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c0
push ebp
push esi
push edi
push 0x4399d0
lea ecx, [esp + 0x14]
mov dword [esp + 0x4d8], 0
mov edi, 1
xor esi, esi
call fcn.00420dbb
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x4d8], 1
call fcn.0041e259
push edi
lea ecx, [esp + 0x78]
mov byte [esp + 0x4d8], 2
call fcn.0041db2d
mov eax, dword [0x42fc30]
mov ecx, dword [esp + 0x4dc]
push eax
push 0x21
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x4e0], 3
call fcn.0041e31d
lea edx, [esp + 0xc]
push edx
call fcn.0040d280
add esp, 4
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x4d8], 4
call fcn.00420e3a
lea ecx, [esp + 0xc]
mov byte [esp + 0x4d4], 3
call fcn.00420d4d
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x10], esp
push eax
call fcn.00420ac2
lea ecx, [esp + 0x10]
push ecx
call fcn.0040ca60
push eax
mov byte [esp + 0x4e0], 5
call fcn.0040d460
add esp, 0xc
lea ecx, [esp + 0xc]
mov byte [esp + 0x4d4], 3
call fcn.00420d4d
mov edx, dword [0x42fc30]
mov eax, dword [esp + 0x10]
push edx
push 2
push eax
lea ecx, [esp + 0x80]
call fcn.0041dbf1
mov ecx, dword [esp + 0x18]
or ebp, 0xffffffff
mov eax, dword [ecx + 4]
mov ecx, dword [esp + eax + 0x1c]
cmp dword [ecx + 0x4c], ebp
je 0x40bfbb
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 4]
mov ecx, dword [esp + ecx + 0x78]
cmp dword [ecx + 0x4c], ebp
je 0x40bfbb
test byte [esp + eax + 0x20], 1
jne 0x40bf8f
mov ebp, dword [esp + 0x4e0]
call fcn.0040db40
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 4]
mov ecx, dword [esp + eax + 0x4c]
lea eax, [esp + eax + 0x18]
test ecx, ecx
jge 0x40be9b
add eax, 0x38
push eax
call fcn.0041e243
add esp, 4
mov ecx, dword [esp + 0x1c]
push 0xa
inc ecx
push 0x3ff
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x24]
call fcn.0041e16c
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 4]
mov ecx, dword [esp + eax + 0x4c]
lea eax, [esp + eax + 0x18]
test ecx, ecx
jge 0x40bedb
add eax, 0x38
push eax
call fcn.0041e24e
add esp, 4
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0x10]
call fcn.00420dbb
lea edx, [esp + 0xc]
mov byte [esp + 0x4d4], 6
push edx
call fcn.0040b7f0
add esp, 4
lea ecx, [esp + 0xc]
mov esi, eax
mov byte [esp + 0x4d4], 3
call fcn.00420d4d
test esi, esi
je 0x40bf50
push 0
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00420dbb
push esi
call fcn.0040b4a0
add esp, 8
push ebp
call fcn.0040e8c0
add esp, 0xc
xor ecx, ecx
test eax, eax
sete cl
mov edi, ecx
test edi, edi
je 0x40bf7a
lea edx, [esp + 0xcc]
lea ecx, [esp + 0x74]
push edx
call fcn.0041dd8a
push 0x40aeea
push 0xa
mov ecx, eax
call fcn.0041e046
mov ecx, eax
call fcn.0040aedb
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 4]
test byte [esp + ecx + 0x20], 1
je 0x40be77
or ebp, 0xffffffff
lea ecx, [esp + 0x74]
call fcn.0041dc33
lea ecx, [esp + 0x18]
call fcn.0041dc33
mov edx, dword [esp + 0x4dc]
mov eax, dword [esp + 0x10]
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, 1
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x4d4], 2
call fcn.0041dbde
lea ecx, [esp + 0x7c]
call fcn.0041dab4
lea ecx, [esp + 0x24]
mov byte [esp + 0x4d4], 1
call fcn.0041e30a
lea ecx, [esp + 0x24]
call fcn.0041dab4
lea ecx, [esp + 0x10]
mov byte [esp + 0x4d4], 0
call fcn.00420d4d
lea ecx, [esp + 0x4dc]
mov dword [esp + 0x4d4], ebp
call fcn.00420d4d
mov ecx, dword [esp + 0x4cc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x4cc
ret