Function at 0x402dc0
Capabilities:
Copy file
Delete file

Disassembly:
sub esp, 0x118
mov eax, dword [0x41b374]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x14], ecx
lea edi, [eax + 0x930]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
push ecx
call fcn.00401860
add esp, 4
test eax, eax
je 0x4030f5
mov ebp, dword [esp + 0x12c]
push 0x5c
push ebp
call fcn.0040d560
add esp, 8
test eax, eax
je 0x402e2e
lea edi, [eax + 1]
lea edx, [esp + 0x20]
jmp 0x402e34
lea edx, [esp + 0x20]
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0x20]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [0x41b38c]
mov ebx, eax
mov eax, dword [ecx + 0x960]
test eax, eax
je 0x402ea6
lea edx, [esp + 0x20]
push edx
call fcn.00401910
add esp, 4
test eax, eax
je 0x402eed
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x20]
push eax
call fcn.0040cae0
test eax, eax
jne 0x402ea6
lea ecx, [esp + 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x402eed
lea edx, [esp + 0x20]
mov esi, 1
push edx
call fcn.00401910
add esp, 4
test eax, eax
je 0x402eed
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
cmp esi, 0x3e8
je 0x4030e7
push esi
lea eax, [esp + ebx + 0x24]
push 0x418270
push eax
call edi
lea ecx, [esp + 0x2c]
inc esi
push ecx
call fcn.00401910
add esp, 0x10
test eax, eax
jne 0x402ec2
lea edx, [esp + 0x20]
push 0
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x402f1c
push ebp
push 0x100c
call fcn.0040c000
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x118
ret 8
lea eax, [esp + 0x20]
push eax
call fcn.00414f56
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], eax
add esp, 4
mov eax, dword [ecx + 0x24]
mov edx, dword [ecx + 0x28]
lea esi, [ecx + 0x1c]
sub edx, eax
sar edx, 2
cmp edx, 1
mov edi, eax
jae 0x40302d
mov edx, dword [esi + 4]
test edx, edx
je 0x402f5d
mov ecx, eax
sub ecx, edx
sar ecx, 2
cmp ecx, 1
ja 0x402f62
mov ecx, 1
test edx, edx
jne 0x402f6a
xor eax, eax
jmp 0x402f6f
sub eax, edx
sar eax, 2
add eax, ecx
test eax, eax
mov dword [esp + 0x1c], eax
jge 0x402f7b
xor eax, eax
shl eax, 2
push eax
call fcn.0040db8c
mov ebp, dword [esi + 4]
add esp, 4
cmp ebp, edi
mov dword [esp + 0x18], eax
mov ebx, eax
je 0x402fa8
push ebp
push ebx
call fcn.00406070
add ebp, 4
add esp, 8
add ebx, 4
cmp ebp, edi
jne 0x402f94
lea ecx, [esp + 0x10]
push ecx
push 1
push ebx
mov ecx, esi
call fcn.00403650
mov edx, dword [esi + 8]
add ebx, 4
push ebx
push edx
push edi
mov ecx, esi
call fcn.00406040
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.00405e00
mov edx, dword [esi + 4]
push edx
call fcn.0040cfc2
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
add esp, 4
lea ecx, [edx + eax*4]
mov eax, dword [esi + 4]
test eax, eax
mov dword [esi + 0xc], ecx
jne 0x40300f
mov ebp, dword [esp + 0x12c]
xor ecx, ecx
mov dword [esi + 4], edx
lea eax, [edx + ecx*4 + 4]
mov dword [esi + 8], eax
jmp 0x4030b9
mov ecx, dword [esi + 8]
mov ebp, dword [esp + 0x12c]
sub ecx, eax
mov dword [esi + 4], edx
sar ecx, 2
lea eax, [edx + ecx*4 + 4]
mov dword [esi + 8], eax
jmp 0x4030b9
mov ecx, eax
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x40307b
lea edx, [edi + 4]
mov ecx, esi
push edx
push eax
push edi
call fcn.00406040
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
mov edx, eax
push ecx
sub edx, edi
mov ecx, 1
sar edx, 2
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.00403650
mov eax, dword [esi + 8]
cmp edi, eax
je 0x4030b5
mov edx, dword [esp + 0x10]
mov dword [edi], edx
add edi, 4
cmp edi, eax
jne 0x40306c
jmp 0x4030b5
push eax
push eax
add eax, 0xfffffffc
mov ecx, esi
push eax
call fcn.00406040
mov ecx, dword [esi + 8]
lea eax, [ecx - 4]
cmp edi, eax
je 0x4030a1
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, edi
mov dword [ecx], edx
jne 0x403092
lea eax, [edi + 4]
cmp edi, eax
je 0x4030b5
mov ecx, dword [esp + 0x10]
mov dword [edi], ecx
add edi, 4
cmp edi, eax
jne 0x4030a8
add dword [esi + 8], 4
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x130]
lea eax, [esp + 0x20]
push edx
push eax
push ebp
push 0x6b616240
call fcn.0040c8a0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x118
ret 8
push ebp
push 0x100c
call fcn.0040bfe0
add esp, 8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x118
ret 8