Function at 0x402c64
Capabilities:
Copy file
Delete file
Enumerate files on windows
Move file

Disassembly:
push ebp
lea ebp, [esp - 4]
enter 0x710, 0
push ebx
push ecx
push edx
mov dword [ebp - 4], esp
mov byte [0x409b8f], 0
call fcn.00406320
cmp eax, 1
jle 0x402ca7
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00405460
lea esi, [ebp - 0x104]
mov edi, 0x409b90
call fcn.00404a00
mov byte [0x409b8f], al
mov dword [0x40e084], 0x40df7d
mov dword [0x40e07c], 0x40dd7d
mov dword [0x40e080], 0x40de7d
call fcn.004057d0
mov eax, 0
mov dword [0x40e1f6], eax
mov dword [0x40e1fa], 1
mov dword [0x40e1fe], 0xf
mov esi, 0x409e49
lea edi, [ebp - 0x104]
call fcn.00401b30
mov esi, 0x409b97
call fcn.00401af0
mov edi, 0x40db2c
lea esi, [ebp - 0x104]
call fcn.00401940
mov eax, esi
push eax
push 2
call fcn.00405460
lea esi, [ebp - 0x104]
mov edi, 0x409b9f
call fcn.00404a00
test al, al
je 0x402d59
push 0x40e088
mov esi, 0x409e49
lea edi, [ebp - 0x204]
call fcn.00401b30
mov esi, 0x409ba3
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
jmp 0x402dcb
lea eax, [ebp - 0x204]
push eax
push 2
call fcn.00405460
lea esi, [ebp - 0x204]
mov edi, 0x409bb2
call fcn.00404a00
test al, al
je 0x402da4
push 0x40e088
mov esi, 0x409e49
lea edi, [ebp - 0x304]
call fcn.00401b30
mov esi, 0x409bb6
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
jmp 0x402dcb
push 0x40e088
mov esi, 0x409e49
lea edi, [ebp - 0x304]
call fcn.00401b30
mov esi, 0x409bc4
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
push 0x40e088
call fcn.00401ee0
call fcn.00402760
test eax, eax
jne 0x402e3e
push 0x40e088
push 0xff
push 0x40d72c
call fcn.00405360
call fcn.00404e40
lea eax, [ebp - 0x304]
push eax
push 0x40d72c
call fcn.004053e0
mov esi, 0x40d72c
mov edi, 0x409bd2
call fcn.00404a00
test al, al
je 0x402e34
push 0x40e088
push 0xff
push 0x40db2c
call fcn.00405360
call fcn.00404e40
push 0x40e088
call fcn.00401d90
mov esi, 0x409e49
lea edi, [ebp - 0x304]
call fcn.00401b30
mov esi, 0x409bd9
call fcn.00401af0
mov edi, 0x40a049
lea esi, [ebp - 0x304]
call fcn.00401940
mov esi, 0x409e49
lea edi, [ebp - 0x404]
call fcn.00401b30
mov esi, 0x409be5
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x304]
call fcn.00401b30
mov esi, 0x40a149
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0x304]
call fcn.00401940
mov dword [ebp - 0x208], 0xd
mov dword [0x40dd70], 1
inc dword [0x40dd70]
imul eax, dword [0x40dd70], 0x100
mov esi, 0x409f49
lea edi, [ebp - 0x308]
call fcn.00401b30
imul ebx, dword [0x40dd70], 0x100
lea esi, [ebx + 0x40a049]
call fcn.00401af0
lea edi, [eax + 0x40a049]
lea esi, [ebp - 0x308]
call fcn.00401940
dec dword [ebp - 0x208]
jne 0x402eba
mov esi, 0x409e49
lea edi, [ebp - 0x408]
call fcn.00401b30
mov esi, 0x409bf1
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x308]
call fcn.00401b30
mov esi, 0x40af49
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0x308]
call fcn.00401940
push 0x40e088
mov esi, 0x409e49
lea edi, [ebp - 0x308]
call fcn.00401b30
mov esi, 0x409bfd
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
push 0x40e088
call fcn.00401210
push 0x40e088
push 0x409e49
push 0
call fcn.00402780
call fcn.00404db0
mov dword [ebp - 0x20c], 3
mov eax, 0
mov dword [0x40dd6c], eax
inc dword [0x40dd6c]
mov eax, dword [0x40dd6c]
imul ebx, dword [eax*4 + 0x40e1f2], 0x100
lea esi, [ebx + 0x40a049]
lea edi, [ebp - 0x50c]
call fcn.00401b30
mov esi, 0x409c0c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x40c]
call fcn.00401b30
imul ebx, dword [eax*4 + 0x40e1f2], 0x100
lea esi, [ebx + 0x40b060]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x30c]
call fcn.00401b30
mov esi, 0x409c10
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x30c]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x4031f0
mov ebx, dword [0x40dd6c]
imul eax, dword [ebx*4 + 0x40e1f2], 0x100
mov edi, 0x40d72c
lea esi, [eax + 0x40a049]
call fcn.00401940
cmp dword [0x40dc2c], 0x10
je 0x403103
push 0x40dc58
push 0x409c12
call fcn.00404e10
test eax, eax
je 0x403103
push 0x40dc58
push 0x409c15
call fcn.00404e10
test eax, eax
je 0x403103
push 0x40e088
push 0x40d72c
push 0
call fcn.00402780
call fcn.00404db0
push 0x40e088
lea eax, [ebp - 0x30c]
push eax
push 0x40dc58
call fcn.00402b80
lea ebx, [ebp - 0x30c]
push ebx
push 0
call fcn.00402780
call fcn.00404db0
push 0x40e088
push dword [0x40dc40]
push 0
call fcn.00404dd0
call fcn.00404db0
push 0x40e088
push dword [0x40dc44]
push 0
call fcn.00404dd0
call fcn.00404db0
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x4031e5
mov eax, dword [0x40dd6c]
imul ebx, dword [eax*4 + 0x40e1f2], 0x100
mov edi, 0x40d72c
lea esi, [ebx + 0x40a049]
call fcn.00401940
cmp dword [0x40dc2c], 0x10
je 0x4031e0
push 0x40dc58
push 0x409c17
call fcn.00404e10
test eax, eax
je 0x4031e0
push 0x40dc58
push 0x409c1a
call fcn.00404e10
test eax, eax
je 0x4031e0
push 0x40e088
push 0x40d72c
push 0
call fcn.00402780
call fcn.00404db0
push 0x40e088
lea eax, [ebp - 0x30c]
push eax
push 0x40dc58
call fcn.00402b80
lea ebx, [ebp - 0x30c]
push ebx
push 0
call fcn.00402780
call fcn.00404db0
push 0x40e088
push dword [0x40dc40]
push 0
call fcn.00404dd0
call fcn.00404db0
push 0x40e088
push dword [0x40dc44]
push 0
call fcn.00404dd0
call fcn.00404db0
jmp 0x403103
push dword [0x40d728]
call sub.kernel32.dll_FindClose
dec dword [ebp - 0x20c]
jne 0x402fa3
push 0x40e088
call fcn.00401d90
mov esi, 0x409f49
lea edi, [ebp - 0x40c]
call fcn.00401b30
mov esi, 0x409c1c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x30c]
call fcn.00401b30
mov esi, 0x409c29
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x30c]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x4036b6
push eax
call sub.kernel32.dll_FindClose
call fcn.00402760
test eax, eax
je 0x40327d
push 0x409c2b
call fcn.00404d50
mov dword [ebp - 0x210], 0x10
mov dword [0x40dd70], 0xffffffff
inc dword [0x40dd70]
mov esi, 0x409f49
lea edi, [ebp - 0x410]
call fcn.00401b30
imul eax, dword [0x40dd70], 0x100
lea esi, [eax + 0x40b060]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c3b
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x310]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x4035cc
push 0x40dc58
push dword [0x40e07c]
push dword [0x40e080]
push dword [0x40e084]
call fcn.00404b40
lea ebx, [ebp - 0x310]
push ebx
push dword [0x40e084]
call fcn.00402b80
mov edi, 0x40df7c
lea esi, [ebp - 0x310]
call fcn.00401940
mov eax, esi
push eax
push dword [0x40e080]
call fcn.00402b80
mov edi, 0x40de7c
lea esi, [ebp - 0x310]
call fcn.00401940
mov eax, esi
push eax
push dword [0x40e07c]
call fcn.00402b80
mov edi, 0x40dd7c
lea esi, [ebp - 0x310]
call fcn.00401940
push 0xff
push 0x40df7c
push 1
push 1
call fcn.00404af0
push 0x40df7c
push 0x40dd78
call fcn.004048a0
mov dword [0x40dd74], eax
cmp dword [0x40dd78], 0
jne 0x40344e
mov esi, 0x409f49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x410]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x310]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x310]
call fcn.00401940
imul eax, dword [0x40dd70], 0x100
lea esi, [eax + 0x40a049]
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x410]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x310]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x310]
call fcn.00401940
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_MoveFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x4035c1
push 0x40dc58
push dword [0x40e07c]
push dword [0x40e080]
push dword [0x40e084]
call fcn.00404b40
lea eax, [ebp - 0x310]
push eax
push dword [0x40e084]
call fcn.00402b80
mov edi, 0x40df7c
lea esi, [ebp - 0x310]
call fcn.00401940
mov eax, esi
push eax
push dword [0x40e080]
call fcn.00402b80
mov edi, 0x40de7c
lea esi, [ebp - 0x310]
call fcn.00401940
mov eax, esi
push eax
push dword [0x40e07c]
call fcn.00402b80
mov edi, 0x40dd7c
lea esi, [ebp - 0x310]
call fcn.00401940
push 0xff
push 0x40df7c
push 1
push 1
call fcn.00404af0
push 0x40df7c
push 0x40dd78
call fcn.004048a0
mov dword [0x40dd74], eax
cmp dword [0x40dd70], 0x10
jg 0x40351d
cmp dword [0x40dd78], 0
jne 0x4035bc
mov esi, 0x409f49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x410]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x310]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x310]
call fcn.00401940
imul eax, dword [0x40dd70], 0x100
lea esi, [eax + 0x40a049]
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x410]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x310]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x310]
call fcn.00401940
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_MoveFileA
jmp 0x40344e
push dword [0x40d728]
call sub.kernel32.dll_FindClose
dec dword [ebp - 0x210]
jne 0x403291
mov esi, 0x409f49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c3d
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x310]
call fcn.00401940
mov esi, 0x409e49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c4a
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x310]
call fcn.00401940
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
mov esi, 0x409f49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c62
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x310]
call fcn.00401940
mov esi, 0x409e49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c6f
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x310]
call fcn.00401940
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
mov esi, 0x409e49
lea edi, [ebp - 0x310]
call fcn.00401b30
mov esi, 0x409c87
call fcn.00401af0
mov esi, 0x40db2c
call fcn.00404880
test al, al
je 0x403f34
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409c8f
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409c9a
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x4038d4
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409c9c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x4038c9
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409ca4
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x4037f6
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cac
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409cbb
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x403af4
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cbd
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cc9
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x403ae9
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cce
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cda
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x4039ff
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cdf
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409cf6
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x403d14
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409cf8
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d0c
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x403d09
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d19
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d2d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x403c1f
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d3a
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409d4d
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x403f34
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d4f
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d5f
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x403f29
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d68
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d78
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x403e3f
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d81
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409d8c
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x40415e
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d8e
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x409e49
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x404049
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x40405a
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x404153
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d96
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x409e49
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x404133
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x404144
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x404064
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409d9e
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409dad
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x404388
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409daf
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x409f49
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x404273
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x404284
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x40437d
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409dbb
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x409f49
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x40435d
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x40436e
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x40428e
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409dc7
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409dd9
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x4045b2
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409ddb
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x40449d
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x4044ae
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x4045a7
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409dea
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x610]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x510]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x404587
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x404598
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x4044b8
push dword [0x40d728]
call sub.kernel32.dll_FindClose
mov esi, 0x409e49
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x409df9
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409e0f
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0x40dc2c
push 0x40d72d
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40d728], eax
cmp eax, 0xffffffff
je 0x40486d
mov esi, 0x409e49
lea edi, [ebp - 0x610]
call fcn.00401b30
mov esi, 0x409e11
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x710]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409e24
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x610]
call fcn.00401b30
mov esi, 0x409e26
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x710]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409e2b
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
mov al, byte [0x409b8f]
test al, al
je 0x40470c
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x40471d
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
push 0x40dc2c
push dword [0x40d728]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x404862
mov esi, 0x409e49
lea edi, [ebp - 0x610]
call fcn.00401b30
mov esi, 0x409e2d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x710]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409e40
call fcn.00401af0
mov edi, 0x40d72c
lea esi, [ebp - 0x410]
call fcn.00401940
mov esi, 0x40db2c
lea edi, [ebp - 0x610]
call fcn.00401b30
mov esi, 0x409e42
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401b30
mov esi, 0x40dc58
lea edi, [ebp - 0x710]
push 0xff
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x510]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x410]
call fcn.00401b30
mov esi, 0x409e47
call fcn.00401af0
mov edi, 0x40da2c
lea esi, [ebp - 0x410]
call fcn.00401940
push 0
call sub.kernel32.dll_SetLastError
mov al, byte [0x409b8f]
test al, al
je 0x404842
push 1
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
jmp 0x404853
push 0
push 0x40da2d
push 0x40d72d
call sub.kernel32.dll_CopyFileA
push 0x40d72d
call sub.kernel32.dll_DeleteFileA
jmp 0x404727
push dword [0x40d728]
call sub.kernel32.dll_FindClose
pop edx
pop ecx
pop ebx
leave
pop ebp
ret