Function at 0x416faf
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
xor ebx, ebx
push edi
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0040e944
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x263]
mov byte [ebp - 0x264], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x264]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp byte [ebp - 0x264], 0x5c
jne 0x417150
cmp byte [ebp - 0x263], 0x5c
jne 0x417150
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
push str..exe
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
push eax
call fcn.00420582
pop ecx
pop ecx
push str.CopyFileExA
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0x40581a
push ebx
push 0x12
push dword [ebp + 8]
mov dword [ebp - 8], eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, 0x422
push str.Copying_files._Please_wait...
push edi
push eax
mov dword [ebp - 4], eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x5c]
call fcn.004218a1
cmp dword [ebp - 8], ebx
je 0x4170e4
lea eax, [ebp - 0x1c]
push eax
push edi
push dword [ebp - 4]
call esi
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
push eax
call esi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 4]
call esi
mov esi, dword [ebp - 0x14]
push 0xffffff
sub esi, dword [ebp - 0x1c]
push 0xf
sub esi, 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
mov eax, dword [ebp - 0x20]
push 2
push 0xc56b32
push 0x13
add eax, 0xffffffdd
push esi
push eax
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x5c]
sub eax, esi
sub eax, 0xf
push eax
push dword [ebp - 4]
call fcn.004219eb
cmp dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
push ebx
jne 0x417103
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
jmp 0x417121
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x160]
push 0x41750b
push eax
lea eax, [ebp - 0x264]
push eax
call dword [ebp - 8]
push dword [ebp - 4]
mov esi, eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp esi, ebx
je 0x417148
lea eax, [ebp - 0x160]
mov ecx, 0x481858
push eax
call fcn.0041e77c
mov byte [0x48244e], 1
lea ecx, [ebp - 0x5c]
call fcn.004218b2
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push dword [ebp + 8]
mov esi, 0x4810c0
mov ecx, esi
call fcn.0041b68d
mov ecx, esi
call fcn.00418cb9
test eax, eax
jge 0x417183
push ebx
push str.Couldnt_read_TOC._Aborting.
push ebx
mov ecx, esi
call fcn.0041da57
jmp 0x4173f0
mov ecx, esi
call fcn.0041843b
cmp dword [0x481624], ebx
mov dword [ebp + 8], ebx
jle 0x41723d
push dword [ebp + 8]
mov ecx, 0x481618
call fcn.0042168b
mov edi, eax
cmp edi, ebx
je 0x4171d8
lea eax, [edi + 0x14]
mov ecx, esi
push eax
call fcn.00418851
lea eax, [edi + 0x20]
mov ecx, esi
push eax
call fcn.00418851
lea eax, [edi + 0x2c]
mov ecx, esi
push eax
call fcn.00418851
lea eax, [edi + 0x38]
mov ecx, esi
push eax
call fcn.00418851
cmp dword [edi + 0x10], 0xffffffff
jne 0x41722b
cmp dword [edi + 0x48], ebx
jne 0x41722b
lea eax, [edi + 0x14]
lea ecx, [edi + 0x48]
push eax
call fcn.0041e7ea
lea ecx, [edi + 0x48]
call fcn.0041f593
push eax
call fcn.0042802e
pop ecx
mov dword [edi + 0x54], eax
push 1
push str._IT_Type_
mov ecx, edi
call fcn.0041ea64
test al, al
je 0x41722b
mov edi, dword [edi + 0x54]
cmp edi, 1
je 0x417225
cmp edi, 2
je 0x417225
cmp edi, 4
jne 0x41722b
mov dword [0x4817b4], edi
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [0x481624]
jl 0x417199
cmp dword [0x48181c], ebx
je 0x417259
cmp byte [0x4823f4], bl
je 0x417259
cmp byte [0x4823f5], bl
je 0x417409
mov ecx, esi
call fcn.0041d84b
mov ecx, esi
call fcn.0041c663
test byte [0x4812a4], 0x40
je 0x4172a8
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x160]
mov ecx, 0x481910
push eax
call fcn.00425973
lea eax, [ebp - 0x160]
mov ecx, 0x481738
push eax
call fcn.0041e77c
mov ecx, esi
call fcn.0041c4bb
test al, al
jne 0x4173f0
cmp dword [0x481764], ebx
jne 0x417304
mov ecx, esi
call fcn.0041c379
test al, al
jne 0x4173f0
cmp dword [0x481764], ebx
jne 0x417304
mov ecx, esi
call fcn.00417b93
test al, al
je 0x417409
cmp dword [0x481764], ebx
jne 0x417304
mov ecx, esi
call fcn.0041e356
test eax, eax
jne 0x417304
cmp dword [0x481760], ebx
je 0x4173f0
test byte [0x4812a4], 0x40
je 0x41731d
test byte [0x4812ab], 8
je 0x41731d
and byte [0x4812ab], 0xf7
cmp dword [0x481764], ebx
jne 0x417334
mov ecx, esi
call fcn.0041e419
test al, al
je 0x4173f0
mov ecx, esi
call fcn.0041a5d5
mov edi, eax
cmp edi, ebx
jge 0x4173a2
lea ecx, [ebp - 0x18]
call fcn.0041e62f
push edi
lea eax, [ebp - 0x18]
push str.Initialization_failed._Aborting._Error_code:__d
push eax
call fcn.0041ecd1
add esp, 0xc
lea ecx, [ebp - 0x18]
push ebx
call fcn.0041f593
push eax
push ebx
mov ecx, esi
call fcn.0041da57
cmp byte [0x48244e], bl
je 0x417386
mov ecx, 0x481858
call fcn.0041f593
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x48244d], bl
lea ecx, [ebp - 0x18]
setne al
mov esi, eax
call fcn.0041e765
mov eax, esi
jmp 0x417504
cmp dword [0x481278], ebx
je 0x4173d0
call fcn.00420d72
test al, al
jne 0x4173d0
push ebx
mov ecx, 0x482264
call fcn.0041f593
push eax
push ebx
mov ecx, esi
call fcn.0041da57
push 1
mov ecx, esi
call fcn.0041c862
cmp byte [0x4823f4], bl
push ebx
je 0x4174a2
mov edi, 0x481a08
mov ecx, edi
call fcn.00413ffd
cmp al, bl
mov byte [ebp + 0xb], al
jne 0x417419
cmp byte [0x48244e], bl
je 0x417409
mov ecx, 0x481858
call fcn.0041f593
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
cmp byte [0x48244d], bl
setne al
jmp 0x417504
cmp dword [0x481764], ebx
je 0x41742d
mov ecx, esi
call fcn.0041815b
mov byte [ebp + 0xb], al
jmp 0x41746e
mov eax, dword [0x4812a8]
test al, 2
je 0x41743f
mov ecx, edi
call fcn.00413862
jmp 0x41746e
test al, 4
je 0x41744d
test ah, 0x80
je 0x41744d
push 1
pop edx
jmp 0x41744f
xor edx, edx
test al, 8
je 0x41745d
test ah, 0x40
je 0x41745d
push 1
pop ecx
jmp 0x41745f
xor ecx, ecx
shr eax, 0x1b
and al, 1
push eax
push edx
push ecx
mov ecx, edi
call fcn.00414929
cmp byte [0x48244e], bl
je 0x417487
mov ecx, 0x481858
call fcn.0041f593
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x48244d], bl
je 0x41749c
xor eax, eax
cmp byte [ebp + 0xb], bl
jmp 0x4174fd
movzx eax, byte [ebp + 0xb]
jmp 0x417504
mov ecx, esi
call fcn.0041a3ca
mov ecx, esi
call fcn.0041c91d
cmp dword [0x481764], ebx
mov edi, eax
je 0x4174c9
mov ecx, esi
call fcn.0041815b
neg al
sbb eax, eax
neg eax
mov edi, eax
push 1
mov ecx, esi
call fcn.0041dca3
cmp byte [0x48244e], bl
je 0x4174eb
mov ecx, 0x481858
call fcn.0041f593
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x48244d], bl
je 0x417502
xor eax, eax
cmp edi, ebx
sete al
jmp 0x417504
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10