Function at 0x4180a0
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
mov eax, dword [0x61de38]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.0041a5c0
test eax, eax
je 0x41831f
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x108]
push esi
push edi
push 0x104
push eax
call ebx
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x108]
push str.ddtd.dll
push eax
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call esi
push 0x5fc3f4
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push str._s_s
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x20c]
add esp, 0x20
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0x20c]
push 0
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push 0x104
lea eax, [ebp - 0x108]
push eax
call ebx
push str.kpmdrv.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push str.user32.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push 0x104
lea eax, [ebp - 0x108]
push eax
call ebx
push str.port.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push str.kernel32.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push 0x104
lea eax, [ebp - 0x108]
push eax
call ebx
push str.port2.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push str.kernelbase.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push 0x104
lea eax, [ebp - 0x108]
push eax
call ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x108]
push str.ntd.dll
push eax
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call ebx
push str.ntdll.dll
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push str._s_s
push eax
call ebx
add esp, 0x20
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push eax
call esi
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
pop edi
pop esi
pop ebx
test eax, eax
je 0x41831f
push 0x5fc3e4
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
add eax, 7
mov dword [0x6279b8], eax
mov eax, dword [sym.imp.GDI32.dll_GetPixel]
add eax, 5
mov dword [0x6279b0], eax
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret