Function at 0x10019e80
Capabilities:
Copy file
Create directory
Delete directory
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10036423
mov eax, dword fs:[0]
push eax
mov eax, 0x4970
call fcn.10033810
mov eax, dword [0x10042074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x4888], ebx
lea eax, [ebx + 0xc8]
push 0x100389e0
mov ecx, eax
mov dword [ebp - 0x488c], eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea eax, [ebp - 0x2c74]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 0x186a0
idiv ecx
lea eax, [ebp - 0x2c74]
push edx
push eax
lea eax, [ebp - 0x474]
push str._s_05d_
push eax
call fcn.1001a8c0
push 0x400
lea eax, [ebp - 0xc74]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0x3874]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0x1c74]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0x2074]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x40
lea eax, [ebp - 0x2474]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0x2874]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
lea eax, [ebp - 0x74]
lea ecx, [ebx + 0x12c]
push 0
push eax
call fcn.100260b0
mov ecx, dword [ebp + 8]
mov edx, ecx
lea esi, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10019fa0
sub edx, esi
jne 0x10019fcc
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2c74]
push eax
lea eax, [ebp - 0x1874]
push str._s_s.zip
push eax
call fcn.1001a8c0
add esp, 0x10
jmp 0x10019fe1
lea edx, [ebp - 0x1874]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x10019fd4
lea esi, [ebx + 0x15c]
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x1001a013
push str.rclog.zip
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0xc74]
push str._s_s
push eax
call fcn.1001a8c0
add esp, 0x10
push str.crashinfo.txt
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x1c74]
push str._s_s
push eax
call fcn.1001a8c0
push str.scapenc.log
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x2074]
push str._s_s
push eax
call fcn.1001a8c0
push str.scapdec.log
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x2474]
push str._s_s
push eax
call fcn.1001a8c0
push str.fileinfo.txt
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x2874]
push str._s_s
push eax
call fcn.1001a8c0
add esp, 0x40
lea eax, [ebp - 0x474]
push str.scaplog.zip
push eax
lea eax, [ebp - 0x1074]
push str._s_s
push eax
call fcn.1001a8c0
add esp, 0x10
call sub.mfc140.dll_Ordinal_2241
push 0x400
lea ecx, [ebp - 0x1474]
push ecx
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x1474]
push 0x5c
push eax
call sub.VCRUNTIME140.dll_strrchr
push str.scapenc.log
mov byte [eax + 1], 0
lea eax, [ebp - 0x1474]
push eax
lea eax, [ebp - 0x3c74]
push str._s_s
push eax
call fcn.1001a8c0
push str.scapdec.log
lea eax, [ebp - 0x1474]
push eax
lea eax, [ebp - 0x4074]
push str._s_s
push eax
call fcn.1001a8c0
lea eax, [ebx + 0x174]
add esp, 0x28
mov ecx, eax
mov dword [ebp - 0x4884], eax
call dword [sym.imp.mfc140.dll_Ordinal_1661]
lea edx, [ebp - 0x874]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x1001a130
lea eax, [ebp - 0x874]
push 0x5c
push eax
call sub.VCRUNTIME140.dll_strrchr
inc eax
push eax
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x3874]
push str._s_s
push eax
call fcn.1001a8c0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__mkdir]
add esp, 0x1c
lea eax, [ebp - 0x2874]
mov ecx, ebx
push eax
call fcn.10018360
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x4474]
push 0x10039048
push eax
call fcn.1001a8c0
lea ecx, [ebp - 0xc74]
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a1a7
sub ecx, edx
je 0x1001a2a9
lea ecx, [ebp - 0x487c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push esi
lea ecx, [ebp - 0x487c]
mov dword [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x487c]
call dword [sym.imp.mfc140.dll_Ordinal_5861]
dec eax
lea ecx, [ebp - 0x487c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_5059]
cmp al, 0x5c
je 0x1001a205
push 0x10039050
lea ecx, [ebp - 0x487c]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push 0
lea ecx, [ebp - 0x487c]
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
lea eax, [ebp - 0x874]
push str._srcindex.db
push eax
call fcn.1001a8c0
add esp, 0xc
lea eax, [ebp - 0x4874]
push 0x400
push eax
lea eax, [ebp - 0x874]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
test eax, eax
je 0x1001a296
lea eax, [ebp - 0x874]
push 0x5c
push eax
call sub.VCRUNTIME140.dll_strrchr
lea ecx, [ebp - 0x874]
add esp, 8
dec ecx
mov byte [eax], 0
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1001a260
mov ax, word [0x10039064]
mov word [ecx], ax
mov al, byte [0x10039066]
mov byte [ecx + 2], al
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0x3074]
push 0x10039068
push eax
call fcn.1001a8c0
add esp, 0xc
lea ecx, [ebp - 0x487c]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0x100389e0
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_310]
lea ecx, [ebp - 0x1074]
mov dword [ebp - 4], 1
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a2d0
sub ecx, edx
je 0x1001a351
lea eax, [ebp - 0x1474]
push eax
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_5861]
dec eax
lea ecx, [ebp - 0x4878]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_5059]
cmp al, 0x5c
je 0x1001a31d
push 0x10039050
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push str.scaplog
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push 0
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
lea eax, [ebp - 0x3474]
push 0x10039078
push eax
call fcn.1001a8c0
add esp, 0xc
lea ecx, [ebp - 0x48a0]
or esi, 0xffffffff
call sub.mfc140.dll_Ordinal_500
xor ebx, ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x487c], ebx
call sub.mfc140.dll_Ordinal_2241
mov eax, dword [eax + 8]
push eax
call fcn.10001150
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
je 0x1001a661
lea ebx, [esi + 2]
call fcn.10001190
test eax, eax
je 0x1001a661
movaps xmm0, xmmword [0x10039210]
lea ecx, [ebp - 0x3074]
movups xmmword [ebp - 0x4954], xmm0
mov dword [ebp - 0x487c], ebx
lea edx, [ecx + 1]
xorps xmm0, xmm0
mov dword [ebp - 0x497c], 0xdc
mov dword [ebp - 0x4974], 0
mov dword [ebp - 0x4970], 0
mov dword [ebp - 0x496c], 0
mov dword [ebp - 0x4968], 0
mov dword [ebp - 0x4964], 0
mov dword [ebp - 0x4960], 0
mov dword [ebp - 0x495c], 0
movups xmmword [ebp - 0x4940], xmm0
mov dword [ebp - 0x48f0], 0
movups xmmword [ebp - 0x4930], xmm0
mov dword [ebp - 0x48ec], 0
movups xmmword [ebp - 0x4920], xmm0
mov dword [ebp - 0x48e8], 0
movups xmmword [ebp - 0x4910], xmm0
mov dword [ebp - 0x48e4], 0
movups xmmword [ebp - 0x4900], xmm0
mov dword [ebp - 0x48e0], 0x10000
mov dword [ebp - 0x48dc], 0
mov dword [ebp - 0x48d8], 0
mov dword [ebp - 0x48d4], 0
movups xmmword [ebp - 0x48d0], xmm0
mov dword [ebp - 0x4978], 4
movups xmmword [ebp - 0x48c0], xmm0
mov dword [ebp - 0x4944], ebx
movups xmmword [ebp - 0x48b0], xmm0
mov dword [ebp - 0x4958], ebx
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a4a5
sub ecx, edx
je 0x1001a4f8
lea ecx, [ebp - 0xc74]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a4c0
sub ecx, edx
je 0x1001a4f8
lea eax, [ebp - 0xc74]
mov dword [ebp - 0x4974], eax
lea eax, [ebp - 0x3074]
mov dword [ebp - 0x4970], eax
lea eax, [ebp - 0xc74]
push eax
call edi
lea eax, [ebp - 0x497c]
push eax
call fcn.100017b0
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_8146]
test al, al
jne 0x1001a57c
push 0
push 0
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_5095]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access_s]
add esp, 8
test eax, eax
jne 0x1001a57c
lea ecx, [ebp - 0x3474]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a530
sub ecx, edx
je 0x1001a57c
lea ecx, [ebp - 0x1074]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1001a544
sub ecx, edx
je 0x1001a57c
lea eax, [ebp - 0x1074]
mov dword [ebp - 0x4974], eax
lea eax, [ebp - 0x3474]
mov dword [ebp - 0x4970], eax
lea eax, [ebp - 0x1074]
push eax
call edi
lea eax, [ebp - 0x497c]
push eax
call fcn.100017b0
mov ecx, dword [ebp - 0x4884]
lea eax, [ebp - 0x3874]
push 0
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_5095]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push eax
call esi
push 0
lea eax, [ebp - 0x2074]
push eax
lea eax, [ebp - 0x3c74]
push eax
call esi
push 0
lea eax, [ebp - 0x2474]
push eax
lea eax, [ebp - 0x4074]
push eax
call esi
push 0
push 0x1042
lea eax, [ebp - 0x1c74]
push eax
lea ecx, [ebp - 0x48a0]
call sub.mfc140.dll_Ordinal_11907
test eax, eax
je 0x1001a613
mov esi, dword [ebp - 0x4888]
lea ecx, [esi + 0x298]
call dword [sym.imp.mfc140.dll_Ordinal_5861]
push eax
lea ecx, [esi + 0x298]
call dword [sym.imp.mfc140.dll_Ordinal_1661]
push eax
lea ecx, [ebp - 0x48a0]
call sub.mfc140.dll_Ordinal_14520
lea ecx, [ebp - 0x48a0]
call sub.mfc140.dll_Ordinal_2880
lea eax, [ebp - 0x1874]
mov dword [ebp - 0x4938], ebx
mov dword [ebp - 0x4974], eax
lea eax, [ebp - 0x4474]
mov dword [ebp - 0x4970], eax
lea eax, [ebp - 0x1874]
push eax
mov dword [ebp - 0x4958], ebx
call edi
lea eax, [ebp - 0x497c]
push eax
call fcn.100017b0
mov ecx, dword [ebp - 0x488c]
mov esi, eax
lea eax, [ebp - 0x1874]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea eax, [ebp - 0xc74]
push eax
call edi
lea eax, [ebp - 0x1074]
push eax
call edi
lea eax, [ebp - 0x1c74]
push eax
call edi
lea eax, [ebp - 0x2074]
push eax
call edi
lea eax, [ebp - 0x2474]
push eax
call edi
lea eax, [ebp - 0x2874]
push eax
call edi
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__rmdir]
add esp, 4
cmp dword [ebp - 0x487c], 0
je 0x1001a6b5
call fcn.10001280
test ebx, ebx
je 0x1001a6be
call fcn.10001250
lea ecx, [ebp - 0x48a0]
call sub.mfc140.dll_Ordinal_1140
lea ecx, [ebp - 0x4878]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
xor eax, eax
test esi, esi
sete al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100337f6
mov esp, ebp
pop ebp
ret 4