Function at 0x419dd0
Capabilities:
Copy file
Delete file
Get file size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdc8
push ebx
mov dword [ebp - 0x238], 0
push 0
push 0
push 3
push 0
push 3
push 0x80000000
push dword [ebp + 8]
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
jne 0x419e0a
mov eax, 0xfffffff8
pop ebx
leave
ret 8
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x20c]
call sub.kernel32.dll_GetFileSize
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jne 0x419e4f
cmp dword [ebp - 0x228], 0
jne 0x419e4f
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff5
pop ebx
leave
ret 8
cmp dword [ebp - 0x224], 0x20000000
ja 0x419e64
cmp dword [ebp - 0x228], 0
jbe 0x419e6e
mov eax, 0xfffffffc
pop ebx
leave
ret 8
push 0
push 0
push 0
push 2
push 0
push dword [ebp - 0x20c]
call sub.kernel32.dll_CreateFileMappingA
or eax, eax
jne 0x419e9c
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff7
pop ebx
leave
ret 8
mov dword [ebp - 0x214], eax
push 0
push 0
push 0
push 0
push 4
push dword [ebp - 0x214]
call sub.kernel32.dll_MapViewOfFileEx
or eax, eax
jne 0x419edb
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff6
pop ebx
leave
ret 8
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x21c]
call fcn.0041ab50
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jne 0x419f47
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x21c]
call fcn.0041a240
or eax, eax
jne 0x419f3c
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff4
pop ebx
leave
ret 8
mov dword [ebp - 0x230], eax
jmp 0x419ff4
cmp dword [ebp - 0x234], 3
jne 0x419f99
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x21c]
call fcn.0041a2d0
or eax, eax
jne 0x419f91
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff4
pop ebx
leave
ret 8
mov dword [ebp - 0x230], eax
jmp 0x419ff4
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
cmp dword [ebp - 0x234], 0
jne 0x419fca
mov eax, 0xffffffff
jmp 0x419fef
cmp dword [ebp - 0x234], 1
jne 0x419fda
mov eax, 0xfffffffe
jmp 0x419fef
cmp dword [ebp - 0x234], 4
jne 0x419fea
mov eax, 0xfffffffd
jmp 0x419fef
mov eax, 0xfffffffd
pop ebx
leave
ret 8
mov eax, dword [ebp + 0xc]
or eax, eax
jne 0x41a027
lea eax, [ebp - 0x104]
push eax
push dword [ebp + 8]
call fcn.00411bd0
push 0x430f10
lea eax, [ebp - 0x104]
push eax
call fcn.00411ac0
mov dword [ebp - 0x238], 1
jmp 0x41a07b
push dword [ebp + 8]
push dword [ebp + 0xc]
call fcn.00411b90
or eax, eax
jne 0x41a062
lea eax, [ebp - 0x104]
push eax
push dword [ebp + 8]
call fcn.00411bd0
push 0x430f10
lea eax, [ebp - 0x104]
push eax
call fcn.00411ac0
mov dword [ebp - 0x238], 1
jmp 0x41a07b
lea eax, [ebp - 0x104]
push eax
push dword [ebp + 0xc]
call fcn.00411bd0
mov dword [ebp - 0x238], 0
push 0
push 0x100
push 2
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0x104]
push eax
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
jne 0x41a0d4
push dword [ebp - 0x230]
call sub.kernel32.dll_GlobalFree
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffffb
pop ebx
leave
ret 8
mov dword [ebp - 0x210], eax
push 0
push dword [ebp - 0x22c]
push 0
push 4
push 0
push dword [ebp - 0x210]
call sub.kernel32.dll_CreateFileMappingA
or eax, eax
jne 0x41a138
push dword [ebp - 0x230]
call sub.kernel32.dll_GlobalFree
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x210]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffffa
pop ebx
leave
ret 8
mov dword [ebp - 0x218], eax
push 0
push 0
push 0
push 0
push 0xf001f
push dword [ebp - 0x218]
call sub.kernel32.dll_MapViewOfFileEx
or eax, eax
jne 0x41a1a6
push dword [ebp - 0x230]
call sub.kernel32.dll_GlobalFree
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x218]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x210]
call sub.kernel32.dll_CloseHandle
mov eax, 0xfffffff9
pop ebx
leave
ret 8
mov dword [ebp - 0x220], eax
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x220]
call sub.kernel32.dll_RtlMoveMemory
push dword [ebp - 0x230]
call sub.kernel32.dll_GlobalFree
push dword [ebp - 0x21c]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x214]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x20c]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x220]
call sub.kernel32.dll_UnmapViewOfFile
push dword [ebp - 0x218]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x210]
call sub.kernel32.dll_CloseHandle
cmp dword [ebp - 0x238], 1
jne 0x41a236
push 0
push dword [ebp + 8]
lea eax, [ebp - 0x104]
push eax
call sub.kernel32.dll_CopyFileA
lea eax, [ebp - 0x104]
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, 0
pop ebx
leave
ret 8